Maersk discloses cyberattack on a legacy system from an acquired logistics company, with attackers allegedly stealing 100GB of data
A ransomware group is demanding $5 million and threatening to leak records, passwords, and logistics information
Maersk says core operations remain unaffected while investigating the breach and assessing the validity of the stolen data claims
One of the world’s largest shipping and logistics companies, A. P. Moller–Maersk (often just called Maersk) has confirmed it recently suffered a cyberattack in which it lost sensitive data from one of its earlier acquisitions. The criminals are now trying to pressure the company into paying a ransom , threatening to release all of the stolen information on the dark web. Maersk issued an incident report, saying cybercriminals broke into a unnamed company it had previously acquired which reportedly operated a legacy system that the attackers managed to pierce. “Our findings so far strongly suggest no sensitive data has been disclosed,” Maersk said, “The incident is isolated to a local system, and we have found no indication that there has been any impact on other Maersk systems or customer and partner systems that connect to Maersk through integrations such as APIs and EDI.” WhiteArmor takes the blame
The company said it does not expect the attack to disrupt its operations, and told its customers they can continue using its platforms to book and manage their shipments as usual. But just because the data has not yet leaked, it doesn’t mean it won’t happen. According to BleepingComputer , a hacking group calling itself WhiteArmor added Maersk to its data leak site and told the company to pay $5 million in bitcoin – or else. "Your contract-logistics arm, the former LF Logistics, runs fulfillment for many of the world’s largest consumer brands…