About 90,000 individuals had info accessed by ransomware hackers who breached the methods of the Port of Seattle final yr.
The group — which runs Seattle-Tacoma Worldwide Airport, a number of parks, container terminals and extra — mentioned it’s sending breach notification letters to these affected, together with about 71,000 individuals in Washington state.
“The risk actors accessed and downloaded some private info from beforehand used Port methods for worker, contractor, and parking knowledge. The Port holds little or no details about airport or maritime passengers, and methods processing funds weren’t affected,” officers said in a discover on Thursday.
These impacted had some mixture of names, dates of start, Social Safety numbers, driver’s licenses, ID playing cards and a few medical info stolen. Victims will obtain one yr of free credit score monitoring providers.
The port additionally posted the breach discover on-line for many who didn’t have an out there mailing handle.
The August 24 incident, which passed off forward of the Labor Day vacation, severely broken the methods utilized by the town’s port and airport, forcing staff to take extraordinary measures to assist vacationers. The ransomware assault knocked out the airport’s Wi-Fi and staff had to make use of dry-erase boards for flight and baggage info.
Screens throughout the facility had been down and a few airways have needed to manually kind via luggage. A autopsy mentioned the encryptions and the ensuing system disconnections took down port providers like “baggage, check-in kiosks, ticketing, Wi-Fi, passenger show boards, the Port of Seattle web site, the flySEA app, and reserved parking.”
Within the message on Thursday, the port mentioned the ransomware assault didn’t have an effect on “the proprietary methods of main airline and cruise companions” and the hackers didn’t entry “the methods of federal companions just like the Federal Aviation Administration, Transportation Safety Administration, and U.S. Customs and Border Safety.”
The hackers, later recognized as being a part of the Rhysida ransomware gang, had been solely in a position to break into legacy methods used for worker knowledge.
In September, port officers confirmed that they refused to pay a ransom, with govt director Steve Metruck explaining that “paying the felony group wouldn’t replicate Port values or our pledge to be a superb steward of taxpayer {dollars}.”
Recorded Future
Intelligence Cloud.
