Port of Seattle, the U.S. authorities company overseeing Seattle’s seaport and airport, is notifying roughly 90,000 people of a knowledge breach after their private data was stolen in an August 2024 ransomware assault.
The company disclosed the assault on August 24, saying the ensuing IT outage disrupted a number of companies and programs, together with reservation check-in programs, passenger show boards, the Port of Seattle web site, the flySEA app, and delayed flights at Seattle-Tacoma Worldwide Airport.
Three weeks after the preliminary disclosure, the Port confirmed that the Rhysida ransomware operation was behind the August 2024 breach.
After the incident, the Port additionally determined to not give in to the cybercriminals’ calls for to pay for a decryptor though they threatened to publish stolen information on their darkish internet leak web site.
“We’ve refused to pay the ransom demanded, and because of this, the actor could reply by posting information they declare to have stolen on their darkweb web site,” the Port of Seattle mentioned on September 13, 2024.
“Our investigation of what information the actor took is ongoing, but it surely does seem that some Port information was obtained by the actor in mid-to-late August. Evaluation of the info taken is advanced and takes time.”
Knowledge breach impacts roughly 90,000 folks
On Thursday, April 3, 2025, the Port introduced that it is now sending roughly 90,000 notification letters to people impacted by the ensuing information breach who had a mailing handle. In keeping with the company, roughly 71,000 of these affected by this information breach are from Washington state.
In keeping with a copy of the breach notification letters, the attackers stole worker, contractor, and parking information in numerous combos, together with names, dates of beginning, Social Safety numbers (or final 4 digits of Social Safety quantity), driver’s license or different authorities identification card numbers, and a few medical data.
The Port additionally mentioned that it shops “little or no data” on airport or maritime passengers and that its fee processing programs had been unaffected by the assault.
“At no level did this incident have an effect on the flexibility to securely journey to or from SEA Airport or use the Port’s maritime services,” the Port added this week. “The proprietary programs of main airline and cruise companions weren’t affected, nor had been the programs of federal companions just like the Federal Aviation Administration, Transportation Safety Administration, and U.S. Customs and Border Safety.”
Rhysida, the ransomware-as-a-service (RaaS) operation behind the Port of Seattle assault, surfaced in Could 2023 and shortly gained notoriety after breaching the British Library, the Chilean Military (Ejército de Chile), the Metropolis of Columbus, Ohio, Sony subsidiary Insomniac Video games, and MarineMax (the world’s largest leisure boat and yacht retailer).
Its associates additionally breached Singing River Well being System, which warned nearly 900,000 folks that their private and well being data had been stolen in an August 2023 Rhysida ransomware assault.
Primarily based on an evaluation of 14M malicious actions, uncover the highest 10 MITRE ATT&CK methods behind 93% of assaults and methods to defend in opposition to them.
