In October 2018, the Port of Vancouver experienced a distributed denial-of-service (DDoS) attack, targeting nearly 225,000 user accounts in a single day—a significant escalation compared to the usual daily probes of around 6,000 accounts. While authorities did not disclose whether sensitive data was compromised, the sheer scale of the attack suggested a coordinated cyber offensive aimed at disrupting operations or probing vulnerabilities. The port, a critical hub for Canada’s trade and logistics, faced potential risks to its operational continuity, reputation, and financial stability, though no immediate financial losses, data breaches, or service outages were publicly confirmed. The incident highlighted the port’s vulnerability to large-scale cyber threats, raising concerns about the resilience of its digital infrastructure against future attacks that could have more severe consequences, such as cargo delays, financial fraud, or supply chain disruptions.

In March 2017, the Port of Vancouver suffered a cyber incident triggered by an attendee’s infected device connecting to the port’s Wi-Fi during a crowded meeting. The malware spread to the network, disrupting a live feed in an overflow room and causing operational interruptions until staff resolved the issue by noon. Following the incident, the port faced hundreds of denial-of-service (DoS) attacks weekly until system adjustments were implemented. While the attack originated internally—unlike typical external DoS attempts—it primarily caused temporary service disruptions, including degraded live-streaming functionality. No evidence suggested data breaches, financial losses, or long-term reputational harm beyond minor operational delays. The port’s IT team mitigated the immediate impact, but the recurring DoS attacks highlighted vulnerabilities in their network defenses. The incident underscored risks posed by insider-connected devices but did not escalate into broader systemic failures or data compromises.