Publicly disclosed information for this event

Summary

References

1. https://safety4sea.com/washingtons-port-of-kennewick-confirms-cyber-attack/
2. https://www.professionalmariner.com/washingtons-port-of-kennewick-hit-by-cyberattack/
3. https://www.tri-cityherald.com/news/local/crime/article247251569.html
4. https://www.portofkennewick.org/port-experiences-cybersecurity-incident/
5. https://www.maritime-executive.com/article/ransomware-attack-cripples-systems-of-inland-port-in-washington-state

• Map, understand, patch and secure your exposed assets on the Internet.
• Implement email filtering systems to detect and block phishing emails.
• Train your organisation, personnel regularly against these threats.
• Install efficient Endpoint Detection and Response (EDR) tools.
• Work with your CSIRT organization to better understand the Tactics, Techniques and Procedures used by threat actors.
• Monitor your IT and OT systems to quickly detect potential pre-ransomware activity.
• Implement an efficient offline backup policy.
• Encrypt all sensitive data to avoid further data leaks.