The Port of Lisbon is the third-largest port in Portugal and one of the main European ports was targeted by the cyber attack. The port's website came under a cyber attack on December 25, and as a result of the security flaw, the administrators had to shut it down. The port's website is still offline as of the time of writing. The essential infrastructure's operating activities was not hampered by the cyberattack. The issue was reported by the administration to the Judiciary Police and the National Cybersecurity Centre. The United States Coast Guard and Customs and Border Protection both place a strong emphasis on cybersecurity as a result of the rising level of technology used in our ports.

On Christmas Day 2022, the Port of Lisbon fell victim to a ransomware attack executed by the cybercriminal group LockBit, resulting in a severe data breach. The attackers exfiltrated highly sensitive operational and financial data, including financial reports, audits, budgets, contracts, cargo information, ship logs, and port documentation. To escalate pressure, LockBit published samples of the stolen data and threatened to leak all seized files unless a $1.5 million ransom was paid. The breach exposed critical infrastructure data, risking operational disruptions, financial fraud, and reputational damage. The attack targeted core port functions, potentially jeopardizing trade logistics, regulatory compliance, and stakeholder trust. Given the scale of data theft—spanning financial, contractual, and logistical records—the incident poses existential threats to the port’s operations, supply chain integrity, and long-term viability. The involvement of ransomware further amplifies the severity, as non-compliance with demands could trigger full-scale data exposure, compounding legal, financial, and strategic repercussions.