Maersk confirms data extraction from a legacy IT system
Original title: Hackers Breach Global Shipping Giant Maersk and Claim Theft of 100GB of Logistics Data
WhiteArmor claims 100GB from a former logistics platform and a $5 million bitcoin ransom; Maersk has confirmed neither.
A.P. Moller–Maersk said on November 11, 2026 that attackers accessed an older IT system from a previous acquisition and extracted data. The company calls the incident isolated, with no indicated impact on other Maersk, customer, or partner systems and no expected disruption to bookings. WhiteArmor listed Maersk on a leak site and claims logistics records, plaintext passwords, and device logs. Maersk has not confirmed the group, volume, or contents, and says findings so far suggest no sensitive data was disclosed.
Unconfirmed: WhiteArmor’s claimed volume, ransom, file contents, and link to the LF Logistics platform are unverified.
- WhiteArmor demanded $5 million in bitcoin within 30 days, BleepingComputer reported.
- The group claims nearly 30,000 driver records and 27,842 mobile device logs.
- Maersk acquired LF Logistics from Li & Fung in 2022; that link is unconfirmed.
- No available evidence shows ransomware encrypted any systems.
- Customers were told to verify unexpected breach messages through usual contacts.
Impact: Unauthorized extraction of data from one legacy system
- 1.Treat unexpected breach communications with caution and verify them through usual Maersk contacts
- Threat actors
- WhiteArmor
- Victims
- A.P. Moller–Maersk
- Organizations
- LF Logistics
From the original article
2 min read at cybersecuritynews.com
A. P. Moller–Maersk has confirmed that hackers accessed an older IT system and extracted data, as a group calling itself WhiteArmor claims it stole 100GB of logistics records.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.