A cyberattack at the Port of Seattle and Seattle-Tacoma International Airport over the weekend is another example of hackers increasingly targeting critical infrastructure.
Details are not yet available about the nature of the attack in Seattle this weekend, and whether there was any data breach.
The outage, which is still ongoing, did not impact flights or security checkpoints. But it did cause delays to baggage services and many screens inside the terminal showing flight information weren’t working.
The Port said Saturday that its Maritime Facilities phone systems were down. The Port and airport’s website were also down, as well as email and phone services for Port staff.
Threats to ports are growing, said Michael Morgenstern, partner with DayBlink Consulting, a firm that specializes in cybersecurity. He pointed to the DP World hack in November that disrupted Australia’s biggest ports operator; the huge Maersk attack in 2017; and an attack at the Port of Houston in 2021.
Morgenstern said two different attacker populations are responsible: criminal enterprises and nation-states.
In October 2022, a group of U.S. airports had their websites taken offline in a reported DDoS (distributed denial-of-service) attack claimed by pro-Russian hackers.
So what makes a Port or an airport an attractive target for hackers?
Valuable data, for one.
