San Diego Unified Port District

The Port of San Diego, also known as the San Diego Unified Port District, is a public agency responsible for managing the San Diego Bay waterfront and associated maritime facilities. It oversees the operation of cargo terminals, cruise ship terminals, and maritime-related businesses that support regional and international trade. In addition to maritime functions, the port district provides a range of public services to the community, including the issuance of park permits, handling of public records requests, and support for local business operations. These services are delivered through its internal information technology systems, which enable coordination between port staff, tenants, and the public. The organization’s scope extends to the regulation of tidelands and submerged lands within the bay, ensuring compliance with state and federal environmental and safety standards. By balancing commercial activity with public access and environmental stewardship, the port serves both the maritime industry and the broader San Diego region.

The San Diego Unified Port District was established as a special district by the California State Legislature, giving it a distinct governmental status separate from private enterprises. As a public entity, it is accountable to state oversight bodies and operates under a mandate to promote economic development while protecting natural resources. Its distinguishing attributes include a dual role as both a port operator and a regulator of coastal resources, a combination that is uncommon among many port authorities worldwide. The organization’s internal IT infrastructure, which supports both operational and public‑service functions, was highlighted in a cyber incident on September 25 2018. During that attack, employees experienced limited functionality, disrupting services such as park permits, public records requests, and business operations, although ship movements were not affected. Although the port authority did not disclose technical specifics, officials described the event as disruptive, a term often associated with ransomware, and noted it as part of a series of cyber incidents affecting major ports within a short timeframe.