Maersk says cyber incident hit only an acquired legacy system
Original title: Shipping giant Maersk says recent cyber incident affected legacy system
Maersk reports no sensitive-data disclosure or customer disruption; a ransomware claim remains unconfirmed.
Danish shipping company Maersk said threat actors gained access to a legacy system from a previous acquisition and that the incident does not affect other Maersk, customer or partner systems. The company said its findings suggest no sensitive data was disclosed and it does not anticipate customer disruptions. The statement came three days after the WhiteArmor ransomware gang claimed it stole 100GB from LF Logistics, a Hong Kong firm Maersk acquired in 2022, and demanded $5 million within 30 days. Maersk did not confirm that claim.
Unconfirmed: WhiteArmor’s claim that it stole 100GB from LF Logistics and demanded $5 million is not confirmed by Maersk.
- Maersk reported 2025 revenue of $54 billion.
- The company said APIs and EDI connections to customers and partners were unaffected.
- WhiteArmor claimed driver, warehouse and customer data from LF Logistics.
- Maersk gave few details and did not link the incident to that claim.
Impact: Unauthorized access to one legacy system; no confirmed data disclosure
- Threat actors
- WhiteArmor
- Victims
- MaerskLF Logistics
From the original article
2 min read at therecord.mediaThe incident is the latest in a string of attacks on ports and other shipping organizations worldwide, with Brazil’s largest port hit with ransomware last week.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.