US coast guard Ryuk attack

USCG Marine Safety Information Bulletin 02-19 disclosed in December 2019 that a Ryuk ransomware infection at an MTSA-regulated maritime facility had disrupted process-control monitoring systems alongside corporate IT, resulting in a 30-hour operational shutdown. The infection vector was a phishing link opened on a corporate workstation that enabled lateral movement into the OT environment.

The facility was offline for approximately 30 hours. Process-control and physical-access systems were both affected because of inadequate IT/OT segmentation.