Supply chain’s biggest cyber blind spot? Logistics’ invisible infrastructure - Marine Industry News
Cybersecurity threats have hit the shipping industry hard this year, with Maersk identifying an IT security incident involving unauthorized access to its systems, following similar attacks on Brunswick Corporation and German shipbuilder Lürssen.
This year's Cybersecurity Awareness Month turned into 'black October' as cyber threats intensified globally. Thirty-eight shipping and ports groups faced data leak threats on October 14, followed by incidents in early November where fridges and freezers in seven countries malfunctioned. Maersk recently discovered unauthorized access and data extraction from one of its local legacy systems from a previous acquisition, though the company believes no sensitive data was disclosed.
These incidents follow a pattern of cyberattacks targeting the marine industry. In 2023, Brunswick Corporation paused operations in some locations after an IT security incident impacted its systems and global facilities. Earlier that year, German shipbuilder Lürssen, known for luxury superyachts and military vessels, suffered a ransomware attack that brought large parts of its shipyard operations to a standstill.
The weakest link in the supply chain
The shipping industry represents a global, complex network with diverse technology systems, creating significant cybersecurity vulnerabilities. 'We're only as strong as our weakest link,' says Tom Bebbington, industry engagement & strategic partnerships lead at Tigris. His company builds adaptive infrastructure to connect fragmented operational data across shipping, ports, and global supply chains.
Companies use different software, communication channels, and security practices, with information frequently crossing organizational boundaries through both digital integrations and manual processes. This invisible infrastructure creates opportunities for phishing, invoice fraud, and business email compromise, as fraudulent messages can be difficult to distinguish from legitimate correspondence when information is scattered across multiple channels.
Fragmented data creates cyber vulnerabilities
When information is fragmented across emails, spreadsheets, and disconnected applications, it becomes harder to establish a reliable picture of normal activity. An unexpected change to an order, an unusual transaction, or a discrepancy between a shipment notice and delivery record may go unnoticed because relevant information sits in separate systems.
Connecting operational data can help organisations establish clearer records of activity and understand how an issue in one part of the network could affect others. It can also support faster investigation by making relevant information easier to trace across the supply chain.
Connectivity must come with security
Supply chain cybersecurity requires understanding how information moves between organizations, who can access it, and what happens when that information can no longer be trusted. Tigris's adaptive infrastructure connects legacy tools, spreadsheets, documents, and partner data into an evolving environment that structures information between existing platforms. The system is scalable, allowing businesses to adapt as they add new partners, workflows, and technologies.
Related
