Shipping giant Maersk says recent cyber incident affected legacy system
Danish shipping giant Maersk revealed that threat actors accessed a legacy system from a previous acquisition, though the company maintains no sensitive data was disclosed and customer services remain unaffected.
The incident affecting Maersk, one of the world's largest shipping companies with $54 billion in 2025 revenue, is the latest in a string of attacks on ports and shipping organizations globally. Brazil's largest port was hit with ransomware last week and is still struggling to restore systems.
Isolated impact
Maersk stated its findings suggest no sensitive data has been disclosed and it does not anticipate disruptions for customers. The company emphasized the incident is isolated to a local system.
The incident is isolated to a local system, and we have found no indication that there has been any impact on other Maersk systems or customer and partner systems that connect to Maersk through integrations such as APIs and EDI.
Ransomware claim
Maersk's statement came three days after the WhiteArmor ransomware gang claimed it attacked LF Logistics, which Maersk acquired in 2022. The gang alleged it stole 100GB of data including information on drivers, warehouses, and customers, demanding $5 million within 30 days.
Global shipping under threat
Brazil's Santos Port Authority, one of South America's largest, has been recovering from an attack that began last Friday, causing power outages and cargo delays. Authorities have restored about 70% of systems while Federal Police investigate. The U.S., Europe, and Asia ports have faced repeated ransomware attacks as digital operations expand.
Related
