
Maersk Probes Ransomware Claim Tied to Legacy System - BankInfoSecurity
Danish shipping giant A.P. Moller-Maersk is investigating a potential ransomware attack after the WhiteArmor group claimed responsibility for accessing a legacy system.
The company confirmed Wednesday that no sensitive data has been stolen based on its initial findings. The hack involved a legacy system inherited from a previous acquisition, specifically affecting Maersk's former LF Logistics arm, which handles fulfillment for major consumer brands.
Data Threat
WhiteArmor claims to possess 100 gigabytes of data including driver records, staff accounts, delivery information, and mobile device logs. The group has demanded $5 million worth of bitcoin within 30 days, threatening to make the information public if the ransom isn't paid.
Containment and Impact
Maersk stated the incident is contained to a local system and doesn't affect other company or partner systems. The shipping giant, which operates over 700 vessels and serves 100,000 customers across 130 countries, assured customers of no operational disruption.
The company previously faced the NotPetya ransomware attack in 2017, resulting in a 10-day network shutdown and approximately $300 million in costs. Maersk's latest quarterly earnings showed a 75% increase in pre-tax profits to $4.7 billion.