FlagThis

The Port of Seattle, responsible for overseeing the Seattle-Tacoma International Airport, is currently notifying approximately 90,000 individuals about a significant data breach. This breach stems from a ransomware attack that occurred in August 2024, where personal information was stolen. The attack disrupted operations at the airport, affecting critical systems such as baggage handling, check-in kiosks, and passenger information displays. The Port of Seattle took immediate action by isolating critical systems to prevent further compromise.



The ransomware attack was attributed to the Rhysida ransomware group, who demanded a ransom of 100 bitcoin, equivalent to about $6 million. The Port refused to pay the ransom, deeming it an imprudent use of taxpayer money. The compromised data included names, dates of birth, and Social Security numbers of around 90,000 individuals, with roughly 71,000 of them being Washington state residents.

ImgSrc: thedefendopsdia

References :

• BleepingComputer: ​Port of Seattle, the U.S. government agency overseeing Seattle's seaport and airport, is notifying roughly 90,000 individuals of a data breach after their personal information was stolen in an August 2024 ransomware attack.
• The DefendOps Diaries: Ransomware Breach at Port of Seattle: An In-Depth Analysis
• BleepingComputer: Port of Seattle says ransomware breach impacts 90,000 people
• bsky.app: ​Port of Seattle, the U.S. government agency overseeing Seattle's seaport and airport, is notifying roughly 90,000 individuals of a data breach after their personal information was stolen in an August 2024 ransomware attack.

Classification:

• HashTags: #Ransomware #DataBreach #CyberAttack
• Company: Port of Seattle
• Target: Port of Seattle, 90000 individuals
• Product: Port of Seattle
• Feature: Ransomware
• Type: Ransomware
• Severity: Major