Maersk has confirmed unauthorized access and data extraction from a local legacy system inherited through a previous acquisition. The Danish shipping group said its cybersecurity team launched an investigation after discovering the incident and took steps to secure the affected system in a statement published on November 11.
Maersk said its findings so far strongly suggest that no sensitive data has been disclosed. It has found no indication that other Maersk systems or customer and partner systems connected through APIs and electronic data interchange were affected. The company does not expect disruption to shipment bookings or other customer operations.
BleepingComputer reported that the WhiteArmor ransomware group listed Maersk on its leak site, demanded $5 million and claimed to have stolen about 100GB of data from the OCF/LF Logistics platform. Those claims have not been confirmed by Maersk, which has not publicly attributed the incident to a ransomware group or verified the amount and contents of the data allegedly taken.
Maersk’s incident statement describes the affected environment only as a local legacy system and says the investigation remains ongoing. The company has not disclosed when the unauthorized access began or identified the actor. It said it will update customers if further findings show that any parties need to be notified. The ransomware group’s claims were detailed in BleepingComputer’s original report.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
