Cyber Incident Victim: Portland International Airport
Date:
Jan 2020
Location:
United States of America
Summary
A traveler at Portland International Airport connected a personal PlayStation 4 console to an unsecured passenger information display screen, temporarily hijacking it to play a video game. Security personnel intervened, and the individual complied after requesting to finish his session, with the interaction described as polite. The incident disrupted flight information dissemination and revealed exposed connectivity ports on airport monitors, demonstrating vulnerabilities to unauthorized access of critical display systems within the facility.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 17, 2020, an unidentified traveler at Portland International Airport connected a personal PlayStation 4 console to an airport information display screen, disrupting passenger services. The individual, carrying the console in his luggage, accessed exposed connectivity ports on a monitor displaying an airport map—part of a cluster of screens showing arrivals, departures, and other traveler information in a public area. He successfully hijacked the display to play the video game *Apex Legends*, with photographic evidence confirming the unauthorized connection via visible cables behind the monitor. Airport security personnel detected the activity and intervened, though the exact duration of gameplay before detection was unspecified. Upon confrontation, the traveler requested permission to finish his gaming session but was denied by staff. He complied voluntarily, disconnecting his console without further incident. Port of Portland spokesperson Kama Simonds characterized the interaction as "polite and cordial" but emphasized the disruption to critical passenger information systems.
The incident temporarily disabled at least one airport map display, impairing navigational assistance for travelers. No other systems or networks were confirmed compromised, as the intrusion was limited to physical access to an unsecured monitor’s ports. Airport officials publicly acknowledged the breach, stating it served as "a good reminder of what not to do at the airport" while implicitly criticizing their own failure to protect display connections and power sources. No malicious intent or data theft was alleged, with the individual’s actions framed as opportunistic misuse rather than a targeted attack. The airport did not disclose whether hardware security protocols were subsequently modified, though officials highlighted the vulnerability’s potential for exploitation by actors with harmful intentions beyond gaming. No fines, arrests, or legal actions against the traveler were reported.