Port of Seattle, the U.S. authorities company overseeing Seattle’s seaport and airport, is notifying roughly 90,000 people of an information breach after their private data was stolen in an August 2024 ransomware assault.
The company disclosed the assault on August 24, saying the ensuing IT outage disrupted a number of providers and techniques, together with reservation check-in techniques, passenger show boards, the Port of Seattle web site, the flySEA app, and delayed flights at Seattle-Tacoma Worldwide Airport.
Three weeks after the preliminary disclosure, the Port confirmed that the Rhysida ransomware operation was behind the August 2024 breach.
After the incident, the Port additionally determined to not give in to the cybercriminals’ calls for to pay for a decryptor although they threatened to publish stolen information on their darkish internet leak web site.
“Now we have refused to pay the ransom demanded, and because of this, the actor could reply by posting information they declare to have stolen on their darkweb web site,” the Port of Seattle stated on September 13, 2024.
“Our investigation of what information the actor took is ongoing, however it does seem that some Port information was obtained by the actor in mid-to-late August. Evaluation of the info taken is advanced and takes time.”
Information breach impacts roughly 90,000 folks
On Thursday, April 3, 2025, the Port introduced that it is now sending roughly 90,000 notification letters to people impacted by the ensuing information breach who had a mailing handle. Based on the company, roughly 71,000 of these affected by this information breach are from Washington state.
Based on a copy of the breach notification letters, the attackers stole worker, contractor, and parking information in varied mixtures, together with names, dates of beginning, Social Safety numbers (or final 4 digits of Social Safety quantity), driver’s license or different authorities identification card numbers, and a few medical data.
The Port additionally stated that it shops “little or no data” on airport or maritime passengers and that its cost processing techniques have been unaffected by the assault.
“At no level did this incident have an effect on the flexibility to soundly journey to or from SEA Airport or use the Port’s maritime amenities,” the Port added this week. “The proprietary techniques of main airline and cruise companions weren’t affected, nor have been the techniques of federal companions just like the Federal Aviation Administration, Transportation Safety Administration, and U.S. Customs and Border Safety.”
Rhysida, the ransomware-as-a-service (RaaS) operation behind the Port of Seattle assault, surfaced in Could 2023 and rapidly gained notoriety after breaching the British Library, the Chilean Military (Ejército de Chile), the Metropolis of Columbus, Ohio, Sony subsidiary Insomniac Video games, and MarineMax (the world’s largest leisure boat and yacht retailer).
Its associates additionally breached Singing River Well being System, which warned virtually 900,000 folks that their private and well being data had been stolen in an August 2023 Rhysida ransomware assault.
Primarily based on an evaluation of 14M malicious actions, uncover the highest 10 MITRE ATT&CK methods behind 93% of assaults and learn how to defend towards them.
