In yet another sobering reminder of the vulnerability of our critical infrastructure, the Port of Seattle and Seattle-Tacoma International Airport (Sea-Tac) have been struck this weekend by a cyberattack that disrupted operations and left thousands of travelers scrambling. This attack comes on the heels of a recent CrowdStrike outage that paralyzed air travel and was quickly followed by outages at two Seattle-based tech giants, Amazon and Microsoft. Thankfully, this latest incident did not occur during the upcoming Labor Day holiday weekend, but it serves as a stark warning of the persistent and escalating threats we face.
Testing The Perimeter: Lessons From History
Cyberattacks on critical infrastructure are not just random acts of malice; they are deliberate tests of our defenses. The Port of Seattle and Sea-Tac Airport’s system outages, which began on Saturday morning, have once again highlighted the fragility of our infrastructure’s cyber defenses. The port’s public-facing web infrastructure, including its website, remains largely offline, affecting international travelers in particular, as manual data entry for flight check-ins has caused significant delays.
A Troubling History Of Cyberattacks On Airports
This is not the first time that airports have been targeted by cyberattacks, and it likely won’t be the last. Over the past few years, there has been a growing trend of cyberattacks on major U.S. and international airports. In October 2022, several major U.S. airports, including Los Angeles International Airport (LAX), Chicago O’Hare (ORD), and Atlanta Hartsfield-Jackson International (ATL), experienced temporary outages due to distributed denial-of-service (DDoS) attacks. These incidents were reportedly part of a pro-Russian cyber campaign. Similarly, in 2021, a cyberattack on the Colonial Pipeline highlighted how even a small vulnerability could lead to widespread disruption. These attacks often serve as a precursor to more significant threats, as hackers test the resilience of critical infrastructure. The airline industry, in particular, has become a favored target, given the potential for widespread chaos and disruption.
Despite the Transportation Security Administration’s (TSA) assurance that there has been no impact on security operations, the disruption to the airport’s operations has been profound. The fact that this incident has persisted for two days without a clear resolution time is unacceptable. This attack is not an isolated incident; it is part of a broader trend that demands immediate and decisive action.
Lack Of Preparedness And Foresight
The question that looms large is: When will we learn? How many more of these attacks must occur before we hold executives and boards accountable for lax security and disaster recovery measures? The recent wave of cyberattacks on Seattle’s infrastructure and technology giants is not just a series of unfortunate events; it is a systemic failure that reflects a lack of preparedness and foresight.
A hacker breaching our systems is bad enough, but the inability to recover quickly compounds the problem. The delays in restoring full service at Sea-Tac Airport are a testament to the inadequacy of not only current cybersecurity practices, but also disaster recovery plans. This is not just a technical issue; it is a leadership failure. Executives and boards must be held accountable for the security of their organizations, and by extension, the safety and well-being of the public.
The Growing Threat To Critical Infrastructure
This attack on Sea-Tac Airport is part of a broader pattern of increasing cyber threats to critical infrastructure. Last year, the Biden Administration issued an executive order aimed at improving cybersecurity in ports, recognizing the growing danger. However, these measures alone are not enough. The recent cyberattacks in Seattle are a stark reminder that we must do more to protect our infrastructure from those who seek to exploit its vulnerabilities.
In the wake of these incidents, it is clear that the transportation industry and critical infrastructure sectors must prioritize cybersecurity as a core element of their operations. The time for reactive measures is over; we must adopt a proactive approach that anticipates and mitigates potential threats before they can cause widespread disruption.
The Urgency Of Action
The cyberattack on Seattle-Tacoma International Airport is a wake-up call for all of us. The last time airports were targeted, three were hit. Will another airport become a target right before a holiday weekend? This incident is a stark reminder that our critical infrastructure is under constant threat and that we must take immediate and decisive action to protect it. The time for complacency has passed. We must hold those in leadership positions, as well as politicians, accountable—especially in this election season—and demand that they prioritize the security of our infrastructure. Lest we forget, candidate Hillary Clinton may have lost the 2016 election due to a hacked server and lax security.
As we move forward, it is essential that we learn from these incidents and implement the necessary measures to prevent future attacks. This includes not only investing in advanced cybersecurity technologies but also fostering a culture of security awareness at all levels of an organization. Only by taking these steps can we hope to safeguard our infrastructure and ensure that it remains resilient in the face of evolving threats. The events in Seattle are a stark reminder that the security of our infrastructure is not just a technical issue; it is a matter of national importance. It is time for us to take it seriously.
