North Carolina Ports Contains Cyberattack as Three Facilities Continue Manual Operations

WILMINGTON, N.C. — North Carolina Ports is restoring its computer systems after an outside actor gained unauthorized access and forced operations at three facilities to shift to manual processing.

The cybersecurity incident affected the Port of Wilmington, the Port of Morehead City and the Charlotte Inland Port. North Carolina Ports activated its contingency plan after detecting the intrusion and contacted state agencies and the U.S. Coast Guard.

“The breach has been contained, and we are now in the recovery process,” a North Carolina Ports spokesperson said.

The facilities continued operating on their regular schedules, but personnel were completing certain procedures manually while technicians worked to restore affected systems. Gates remained open, although trucking companies and other port customers were advised to expect delays.

An outside digital forensics team joined the authority’s information technology department to examine the intrusion, determine which systems were affected and support the recovery process.

North Carolina Ports has not publicly identified the attacker or disclosed how access was obtained. Officials have not confirmed whether ransomware was deployed, whether information was stolen or whether the attacker issued a payment demand.

No cybercriminal organization has claimed responsibility for the attack.

Containment indicates that officials believe they have stopped the immediate spread of the intrusion. It does not mean every affected system has been restored or that the investigation has established the full extent of the incident.

Digital forensics specialists will be responsible for examining system logs, affected devices, user accounts and other evidence. That work can help determine when the attacker entered the network, which resources were accessed and whether any unauthorized persistence mechanisms remain.

North Carolina Ports has not disclosed a timetable for completing the restoration. Returning systems to service can require technicians to rebuild equipment, reset credentials, test applications and verify that restored systems are safe before reconnecting them to the operational network.

Manual processing allows cargo operations to continue when digital systems are unavailable, but it can slow gate transactions, cargo documentation, equipment coordination and communications among terminal personnel, trucking companies and customers.

The shift prevented the incident from producing a complete shutdown of the three locations. No extended closure of the ports was announced, and officials did not report an interruption to vessel traffic.

North Carolina Ports operates deepwater facilities in Wilmington and Morehead City, along with an inland terminal in Charlotte. The authority also has access to intermodal rail infrastructure connecting port cargo with inland distribution networks.

The Wilmington and Morehead City facilities moved nearly 4.2 million short tons of bulk and breakbulk cargo during fiscal year 2024. The ports handle materials that support the automotive, agricultural, construction, energy and manufacturing sectors.

North Carolina Ports estimates that its activities support more than 88,000 jobs and generate approximately $660 million in state and local tax revenue annually. A prolonged technology disruption could affect businesses well beyond the port gates, making operational continuity a central part of the recovery effort.

The incident also demonstrates why maritime facilities must maintain procedures for operating when computer systems become unavailable. Modern ports rely on interconnected technology for cargo tracking, billing, terminal access, equipment management and transportation coordination.

North Carolina Ports previously implemented terminal operating technology supporting general cargo and billing functions at Wilmington and Morehead City, with operations connected to the Charlotte terminal. Officials have not identified which applications were disrupted or confirmed that any terminal operating system was compromised.

The involvement of the U.S. Coast Guard reflects the federal agency’s responsibility for maritime safety and security. North Carolina Ports has not disclosed the exact nature of the Coast Guard’s participation or identified the state agencies assisting with the response.

The investigation remains active as North Carolina Ports works to restore normal digital processing. Until officials release additional findings, the attacker, method of entry, systems affected and possibility of information theft remain undetermined.

🔥 NOW AVAILABLE! 🔥

‎👉 Eclipsera – Apple Music

Sponsored • TRJ Ads
Inquiries: contact@therealistjuggernaut.com

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE

AVAILABLE