The Port of Seattle launched a press release Friday confirming that it was focused by a ransomware assault.
The assault occurred on August 24, with the Port (which additionally operates the Seattle-Tacoma International Airport) saying it had “experienced certain system outages indicating a possible cyberattack.”
The Port is now describing this as “a ‘ransomware’ attack by the criminal organization known as Rhysida.” (The group was additionally apparently chargeable for final yr’s cyberattack on the British Library.) With the Port refusing to pay the ransom, Rhysida “may respond by posting data they claim to have stolen on their darkweb site.”
“Our investigation of what data the actor took is ongoing, but it does appear that some Port data was obtained by the actor in mid-to-late August,” the Port mentioned, including that it’s going to notify workers or passengers if it learns that any of their info was stolen.
TechCrunch’s Devin Coldewey truly flew via the airport a couple of days after the assault, the place he noticed firsthand that many airport methods had been nonetheless down.