Cyber attack on the Port of Lisbon Administration claimed by the LockBit ransomware operation

On Monday 26^th of December 2022, the third-largest port in Portugal, the Port of Lisbon Administration (APL) shared with local media outlets that they had experienced a cyber attack that did not impact their operations.

“All safety protocols and response measures provided for this type of occurrence were quickly activated, the situation being monitored by the National Cybersecurity Center and the Judicial Police.” – The announcement was shared with the Portuguese national newspaper Publico.

The Port of Lisbon Administration stated they are continuously working closely with all competent entities in order to guarantee the security of the systems and respective data. However, the LockBit ransomware group claimed the cyber attack when they posted the organisation to its extortion site and claimed to have stolen financial reports, audits, budgets, contracts, cargo information, ship logs, crew details, customer PII (personally identifiable information), port documentation, email correspondence, and more.