Shipping giant Maersk confirms data breach as hackers demand $5 million ransom - TechRadar

The cybercriminals broke into a system from LF Logistics, a Hong-Kong-based third-party logistics company that Maersk acquired in 2022 for $3.6 billion. The attack has raised concerns about potential exposure of sensitive customer and operational data.

Ransom demand

A hacking group calling itself WhiteArmor has added Maersk to its data leak site, demanding $5 million in bitcoin. The group claims to have stolen 100GB of data, including 30,000 driver records, passwords in plaintext, and 33 SUPER_ADMIN accounts.

Company response

Maersk has issued an incident report stating that no sensitive data has been disclosed and the incident is isolated to a local system. The company emphasizes that core operations remain unaffected and customers can continue using its platforms normally.

The company does not expect the attack to disrupt its global network, which includes more than 60 terminals and over 500 warehousing facilities. Maersk employs more than 100,000 people and generates over $50 billion in revenue annually.

Potential risks

If the hackers' claims are true, the breach could pose significant security risks. The exposure of plaintext passwords and administrative credentials could require Maersk to rotate all secrets. Personal information like phone numbers and IMEI numbers could facilitate phishing and vishing attacks.

This incident echoes a 2017 NotPetya attack that cost Maersk between $250 and $300 million after bringing its global network to a standstill. The company is now investigating the breach and assessing the validity of the stolen data claims.