Containment did not restore normal throughput. North Carolina Ports says the attack is contained, but all three sites are still processing cargo manually, so the real impact is a degraded port system rather than a closed one.
The disruption hit Wilmington, Morehead City, and Charlotte. The ports said gates would operate normally, yet delays were still expected, and outside forensics plus state and federal notifications were still in progress.
For physical operations that depend on IT for gates, scheduling, and dispatch, this is the gap that matters: a site can stay open on paper and still lose speed across every terminal and handoff. The operational drag can outlast the incident itself.