In March 2020, the Port of Marseilles suffered collateral damage from a ransomware attack (Mespinoza/Pysa), allegedly orchestrated by the hacker group Mespinoza. While the primary target was the broader Aix-Marseille-Provence Metropolis—a regional administrative hub—the attack disrupted interconnected maritime infrastructure due to shared IT systems. The ransomware encrypted critical data, crippling operational workflows and forcing partial shutdowns of port services.The incident highlighted vulnerabilities in interdependent municipal and industrial networks, where a breach in one sector (government/regional administration) cascaded into another (logistics/transport). Although no direct physical damage or data exfiltration of port-specific assets was confirmed, the attack halted cargo processing, delayed shipments, and strained supply chains, underscoring the fragility of smart port ecosystems. Recovery efforts required system isolation, data restoration from backups, and coordination with cybersecurity agencies, incurring financial losses from downtime, reputational harm, and emergency response costs. The attack also raised concerns about critical infrastructure resilience, as the port serves as a vital economic gateway for Southern Europe.