The network of the Port of Houston, one of the largest port authorities in the US, was targeted by the state-sponsored hacking group using a zero-day vulnerability in a Zoho user authentication appliance. Port officials successfully defended the attack, and no operational data or systems were impacted as a result of the attempted intrusion.

In August 2021, the Port of Houston (USA) faced a sophisticated cyber attack targeting its computer network. The threat actor, suspected to be a nation-state group, exploited an unknown zero-day vulnerability—meaning the flaw was undiscovered by the software vendor at the time. The primary objectives were to exfiltrate sensitive government intelligence and disrupt or halt port operations entirely. Despite the severity of the attempt, the port’s pre-established security protocols successfully mitigated the attack, preventing any compromise of operational systems or data. While no direct financial, reputational, or data breaches occurred, the attack’s intent posed a critical threat to national infrastructure and supply chain stability. The incident underscored vulnerabilities in maritime cybersecurity, particularly against advanced persistent threats (APTs) with geopolitical motivations. Had the attack succeeded, it could have crippled one of the U.S.’s busiest ports, triggering cascading economic and logistical consequences across global trade networks.

In September 2001, the Port of Houston fell victim to a DDoS (PING flood) attack, orchestrated indirectly by an unidentified third party who planted a malicious script on a 19-year-old UK teenager’s system. The attack crippled critical port systems, causing system crashes and rendering essential navigational data (tides, water depths, weather) inaccessible to pilots and shipping companies. This disruption placed vessel navigation at severe risk, potentially endangering maritime operations and supply chain continuity. While no data breach or financial theft occurred, the attack halted core port operations, demonstrating how cyber disruptions can threaten infrastructure reliant on real-time digital systems. The incident also highlighted vulnerabilities in intermediary server security, as the attack leveraged compromised systems to amplify its impact. Though the accused (Aaron Caffrey) was acquitted, the attack exposed the port’s susceptibility to operational sabotage via cyber means, with cascading effects on logistics and safety.