A major cyberattack has disrupted operations at North Carolina’s three key ports, leaving behind a trail of uncertainty and concern for the region’s critical infrastructure. The US Coast Guard is leading the investigation into the breach, which affected all three port facilities – the Port of Wilmington, the Port of Morehead City, and the Charlotte Inland Port.
The attack forced the North Carolina State Ports Authority to delay gate openings and switch to manual processing in a bid to contain the intrusion. While the ports authority has activated its cybersecurity contingency plan, it’s unclear what systems were compromised or whether vessel operations, cargo-handling equipment, or rail services were disrupted. The incident highlights the vulnerability of critical infrastructure to cyber threats, with North Carolina’s ports serving as a vital trade hub for agricultural exports, retail goods, and raw materials.
The investigation is being conducted in collaboration with state and federal partners, including the Coast Guard’s IT unit and the Cybersecurity and Infrastructure Security Agency (CISA). However, CISA officials declined to comment on the matter. The North Carolina Ports Authority has assured users that it will continue posting updates on its website and provide email alerts for further information.
This cyberattack is part of a growing trend of attacks against critical infrastructure in the US. In recent months, water and wastewater systems have been targeted by suspected Iranian actors. While there’s no official attribution yet, experts are closely monitoring the situation to determine whether these incidents are connected. The port attack raises questions about the preparedness of critical infrastructure operators to defend against cyber threats.
The impact on trade and commerce is likely to be significant, given the importance of North Carolina’s ports as a gateway for international trade. Truck and cargo traffic has been affected, although the extent of the disruption remains unclear. As the investigation continues, one thing is certain: this incident serves as a stark reminder of the need for robust cybersecurity measures in critical infrastructure.
In light of this incident, we recommend that operators of critical infrastructure prioritize their cyber defenses and stay vigilant against potential threats. It’s also essential to have a robust incident response plan in place, which includes coordination with state and federal authorities. By learning from this attack and taking proactive steps to secure their systems, organizations can reduce the risk of similar disruptions in the future.
Source: CyberScoop — 2026-08-07