Maersk confirms data was stolen from a system it got through an acquisition, as WhiteArmor demands $5 million
The shipping company says the breach is limited to one local system and that shipments will not be disrupted. The extortion group says it took about 100GB of data.
Evidence: Independent reports. Security stories run only with a named disclosure or independent reporting behind them.
Danish shipping and logistics group A.P. Moller–Maersk has confirmed that hackers took data from one of its IT systems. In a November 11 statement, the company said the system came from a business it acquired earlier, which it did not name. The WhiteArmor ransomware group listed Maersk on its leak site on November 7. It says it took about 100GB of data from the company's logistics and supply-chain platform and threatens to publish it unless Maersk pays $5 million. Maersk said its cybersecurity team found the intrusion, opened an investigation and took steps to secure the system. "Our findings so far strongly suggest no sensitive data has been disclosed," the company said. It added that the incident is "isolated to a local system." Maersk said it found no sign of impact on its other systems or on customer and partner systems that connect through APIs and EDI. It does not expect disruption to customer operations, and its platforms for booking and managing shipments remain available. Maersk is one of the world's largest container carriers, with about 700 ships, 60 terminals in 35 countries and roughly 100,000 employees. The case shows how systems inherited through acquisitions can stay exposed long after a deal closes.