Barcelona Cruise Port

In April 2023, the Barcelona Cruise Port, a critical maritime infrastructure in Spain operating five terminals, fell victim to a LockBit 3.0 ransomware attack. The cybercriminals exfiltrated sensitive data and issued an ultimatum: pay a ransom of $299,999 USD by April 25, 2023, to prevent the public release of all stolen information. Alternatively, the attackers offered a 24-hour deadline extension for $1,000 USD. The threat posed severe operational and reputational risks, as the port serves as a major hub for global cruise traffic, connecting millions of passengers annually. Failure to comply risked exposure of internal operational data, financial records, passenger details, and logistical systems, potentially disrupting port activities, eroding trust among shipping partners, and incurring regulatory penalties. The attack underscored vulnerabilities in maritime cybersecurity, highlighting how ransomware can paralyze critical infrastructure by exploiting digital dependencies in logistics and trade. The port’s response whether they paid the ransom or restored systems from backups remained undisclosed, but the incident served as a stark warning for the sector’s susceptibility to extortion-based cyber threats.

Source: https://www.redpacketsecurity.com/lockbit-3-0-ransomware-victim-bcncruiseport-com/

TPRM report: https://www.rankiteo.com/company/barcelona-cruise-port

"id": "bar655092025",
"linkid": "barcelona-cruise-port",
"type": "Ransomware",
"date": "4/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'transportation/logistics',
                        'location': 'Barcelona, Spain',
                        'name': 'Barcelona Cruise Port',
                        'type': 'port authority'}],
 'data_breach': {'data_encryption': True, 'data_exfiltration': True},
 'description': 'In April 2023, the Barcelona Cruise Port in Spain '
                '(bcncruiseport[.]com) was targeted by a LockBit 3.0 '
                'ransomware attack. The attackers threatened to publish all '
                'available data if the ransom was not paid by April 25, 2023. '
                'The port, which includes five terminals, faced a ransom '
                'demand of $299,999 USD to destroy all information or to '
                'download the data at any moment, and $1,000 USD to extend the '
                'deadline by 24 hours.',
 'impact': {'data_compromised': True},
 'motivation': 'financial gain',
 'ransomware': {'data_encryption': True,
                'data_exfiltration': True,
                'ransom_demanded': '$299,999 USD (to destroy data) / $1,000 '
                                   'USD (24-hour deadline extension)',
                'ransomware_strain': 'LockBit 3.0'},
 'threat_actor': 'LockBit 3.0',
 'title': 'LockBit 3.0 Ransomware Attack on Barcelona Cruise Port',
 'type': 'ransomware'}