Port of Seattle, the U.S. authorities company overseeing Seattle’s seaport and airport, is notifying roughly 90,000 people of a knowledge breach after their private data was stolen in an August 2024 ransomware assault.
The company disclosed the assault on August 24, saying the ensuing IT outage disrupted a number of providers and techniques, together with reservation check-in techniques, passenger show boards, the Port of Seattle web site, the flySEA app, and delayed flights at Seattle-Tacoma Worldwide Airport.
Three weeks after the preliminary disclosure, the Port confirmed that the Rhysida ransomware operation was behind the August 2024 breach.
After the incident, the Port additionally determined to not give in to the cybercriminals’ calls for to pay for a decryptor although they threatened to publish stolen knowledge on their darkish internet leak website.
“We have now refused to pay the ransom demanded, and in consequence, the actor might reply by posting knowledge they declare to have stolen on their darkweb website,” the Port of Seattle mentioned on September 13, 2024.
“Our investigation of what knowledge the actor took is ongoing, however it does seem that some Port knowledge was obtained by the actor in mid-to-late August. Evaluation of the info taken is advanced and takes time.”
Knowledge breach impacts roughly 90,000 individuals
On Thursday, April 3, 2025, the Port introduced that it is now sending roughly 90,000 notification letters to people impacted by the ensuing knowledge breach who had a mailing deal with. Based on the company, roughly 71,000 of these affected by this knowledge breach are from Washington state.
Based on a copy of the breach notification letters, the attackers stole worker, contractor, and parking knowledge in numerous combos, together with names, dates of delivery, Social Safety numbers (or final 4 digits of Social Safety quantity), driver’s license or different authorities identification card numbers, and a few medical data.
The Port additionally mentioned that it shops “little or no data” on airport or maritime passengers and that its cost processing techniques had been unaffected by the assault.
“At no level did this incident have an effect on the power to soundly journey to or from SEA Airport or use the Port’s maritime services,” the Port added this week. “The proprietary techniques of main airline and cruise companions weren’t affected, nor had been the techniques of federal companions just like the Federal Aviation Administration, Transportation Safety Administration, and U.S. Customs and Border Safety.”
Rhysida, the ransomware-as-a-service (RaaS) operation behind the Port of Seattle assault, surfaced in Could 2023 and shortly gained notoriety after breaching the British Library, the Chilean Military (Ejército de Chile), the Metropolis of Columbus, Ohio, Sony subsidiary Insomniac Video games, and MarineMax (the world’s largest leisure boat and yacht retailer).
Its associates additionally breached Singing River Well being System, which warned nearly 900,000 individuals that their private and well being data had been stolen in an August 2023 Rhysida ransomware assault.
Primarily based on an evaluation of 14M malicious actions, uncover the highest 10 MITRE ATT&CK methods behind 93% of assaults and find out how to defend towards them.