Cyber Incident Victim: Port of Tyne
Date:
Aug 2024
Location:
United Kingdom
Summary
The Port of Tyne experienced a distributed denial of service attack targeting its website, causing temporary downtime. Operational systems remained unaffected and all data was secured during the incident. Full website functionality was restored promptly, with investigations ongoing to determine the attack's origin.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On August 6, 2024, the Port of Tyne experienced a cyber attack targeting its public-facing website, rendering it inaccessible for an unspecified period. The incident was identified as a distributed denial-of-service (DDoS) attack, a method designed to overwhelm web infrastructure with excessive traffic volumes. Port authorities confirmed the attack disrupted normal website operations during Tuesday's incident window but emphasized that core operational systems remained unaffected due to their physical and logical separation from the web presence. No data breaches or compromises of sensitive information occurred, with all port data maintained in a "safe and secure" state throughout the incident. The website disruption represented the primary operational impact, though the port's cargo handling, vessel traffic management, and other industrial control systems continued functioning without interruption.

Port management restored full website accessibility promptly following the attack, though the exact timeframe for complete resolution remains unspecified in public statements. A spokesperson confirmed the organization initiated collaborative investigations with undisclosed "relevant parties" to trace the attack's origin, though no attribution details or suspected threat actor profiles were disclosed. The incident did not trigger reports of financial losses, supply chain disruptions, or secondary impacts on port customers or regional logistics networks. Public communications focused exclusively on confirming the DDoS nature of the attack, the integrity of operational systems, and the containment achieved through website restoration. No additional attack vectors, malware deployments, or follow-on intrusion attempts were referenced in the port's initial disclosure.
