Intruders attempt to psychologically manipulate employees and contractors to obtain confidential information.
Public transportation offices are witnessing a surge in social engineering cyberattacks, where intruders attempt to psychologically manipulate employees and contractors to gain confidential information. During a roundtable at the annual Transportation Research Board meeting on January 8, experts shared examples of these sophisticated attacks.
The Port Authority of New York and New Jersey has been particularly susceptible, with cybercriminals exploiting the “human fallibilities and vulnerabilities” of its employees, according to Josh DeFlorio, Chief of Resilience and Sustainability at the Port Authority.
In social engineering cyberattacks, digital criminals leverage their social skills to engage with specific organizational staff, aiming to obtain confidential information or access their computer systems. Jennifer DeBruhl from the Department of Rail and Public Transportation in Virginia recounted a successful attack that led to a statewide system outage lasting six months.
Cordell Schachter, Chief Information Officer of the United States Department of Transportation (USDOT), emphasized the importance of preventive measures, such as multi-factor authentication and system segmentation. He recommended a cybersecurity self-assessment and contacting the FBI or the Cybersecurity and Infrastructure Security Agency (CISA) in case of an attack. “Everyone should undergo a cybersecurity self-assessment to help us understand our current risks and report our plans to remedy them,” stated Schachter.

The US DOT combats these threats through monthly phishing tests for employees, reducing the click-through rate from 20% to 4%. Schachter underscored the immediate replacement of default passwords and basic cyber hygiene practices.
Effective strategies include flagging internal emails with red banners and integrating cybersecurity into the DOT’s strategic plan. Furthermore, the DOT collaborates with the Department of Homeland Security on risk management for the transportation systems sector to safeguard the national transportation network from cyberattacks. CISA provides online resources to counteract these threats.

Commercial Driver’s License (CDL) in Washington: A Guide for Truck Drivers
For those looking to work as professional drivers in the state of Washington, obtaining a Commercial Driver’s License (CDL) is one of the most important

The Growth of Intermodal Transport in Washington: The New Inland Hub Gets Moving
The Tri-Cities Inland Logistics Hub and a new rail link in Pasco are driving intermodal transport growth in Washington.

The Main Truck Bottlenecks in Washington in 2026
The I-5 bridge over the Columbia River is the worst truck bottlenecks in Washington and Oregon.

Guide to Permits for Oversize Vehicles in Washington
Transporting an oversize vehicle, machinery, or load on Washington state highways can require a special size and weight permit. Learn when a permit for oversize load is needed.

High-Value Cargo Leaving Washington Ports: Why a Standard Policy May Not Be Enough
Electronics, machinery, industrial components, and other goods can concentrate hundreds of thousands of dollars in a single trailer. For carriers operating out of Seattle and Tacoma, knowing the true value of what they are hauling can be just as important as knowing the route.

Florida Highways for Truck Drivers: How the State’s Road System Works
Florida organizes its highway network into seven FDOT districts, along with Florida’s Turnpike. Here’s how the system works and what this division means for truck drivers and motor carriers.
