WhiteArmor gang claims responsibility for latest cyber attack on shipping giant Maersk

The Danish shipping company acknowledged the breach in a statement, revealing that hackers accessed a "local legacy system" without specifying which one or what data was taken. Maersk has assured that shipments remain unaffected and no sensitive information appears to have been compromised.

Ransom demand

The WhiteArmor cybercrime group has listed Maersk on its dark web leak site, demanding $5 million within 30 days for the 100GB of stolen data. According to the hackers, the data includes nearly 30,000 driver records, purchase orders, and over 27,000 mobile device records containing personal information.

While Maersk has not confirmed the veracity of the hackers' claims, it is advising customers and partners to treat unexpected messages about the security breach with caution.

Previous incident

This isn't Maersk's first major cyber incident. In 2017, the company suffered a NotPetya malware attack that forced it to reinstall over 4,000 servers and 45,000 workstations, costing up to $300 million. The current breach appears linked to IT systems from its 2022 acquisition of LF Logistics.