Louisville Regional Airport Authority

The Louisville Regional Airport Authority (LRAA) is a public agency responsible for the operation and management of two airports serving the Louisville region in the United States. Its core function is to oversee aviation infrastructure, facilitating commercial air travel, cargo operations, and general aviation services for the local community and broader market. The authority employs approximately 200 full-time staff to maintain daily airport functions, including terminal operations, airfield maintenance, security coordination, and tenant management. As a regional entity, its operational scope is focused on the specific airports under its governance, serving passengers, airlines, and logistics companies within its geographic area. The LRAA's work is integral to the regional transportation network and economic activity, ensuring compliance with federal aviation regulations while managing facilities that support both passenger and freight traffic, notably including a major hub for international cargo.

A defining episode in the LRAA's recent history is the ransomware attack it experienced on May 20, 2019. This incident involved the encryption of the authority's localized files, representing a significant cybersecurity event. Critically, the attack did not disrupt live airport operations or compromise physical security systems at its facilities, thereby avoiding any impact on passenger safety or flight schedules. The organization's response demonstrated a prepared and resilient posture; it refused to pay the demanded ransom and instead successfully restored systems using existing data backups. This outcome highlights a key operational competency in business continuity planning and data recovery. The incident serves as a documented case of an airport authority effectively containing a cyber threat through proactive measures, preserving essential services without operational downtime. The LRAA's handling of the attack underscores its commitment to maintaining secure and reliable airport services despite external digital threats.