Port of Lisbon Administration

The Port of Lisbon Administration (APL), also known as the Lisbon Port Authority, is the public body tasked with the administration, operation and development of the Port of Lisbon. It oversees the facilitation of maritime traffic, manages port infrastructure and coordinates services that support the movement of cargo, passengers and logistics operations within the harbour. As a critical infrastructure entity, the organisation is responsible for ensuring the safe, efficient and continuous functioning of one of Portugal’s primary gateways for international trade and transport. Its activities include the allocation of berths, the supervision of terminal operations and the implementation of security and safety protocols in line with national and international regulations. The APL also engages with shipping agents, freight forwarders and other stakeholders to optimise the flow of goods through the port complex.

The organisation handles a significant volume of maritime traffic, underscoring its importance to the national economy and its role as a key logistics hub in the Iberian Peninsula. This scale of operation necessitates close cooperation with national cybersecurity and civil protection authorities, particularly when safeguarding essential services against disruptions. A notable example of this coordination occurred on 25 December 2022, when the LockBit ransomware group claimed an attack on the APL, exfiltrating financial records, contracts, cargo details, customer personal data and internal communications. Despite the breach, the port reported that operational continuity was maintained through activated safety protocols and ongoing collaboration with cybersecurity authorities, although its website remained offline during the incident. The attackers demanded a $1.5 million ransom and offered additional payments for delayed data leaks or exclusive sales, highlighting the organisation’s exposure to sophisticated cyber threats targeting critical maritime infrastructure. These events have reinforced the APL’s focus on resilience measures and its ongoing efforts to protect the data and systems that underpin the port’s vital functions.