Maersk discloses breach as WhiteArmor demands $5m
Original title: Maersk Reveals Data Breach as Extortion Group Demands $5m
Maersk says a legacy acquired system was accessed and data extracted, with no operational impact found so far.
Maersk said on November 11 that it found unauthorized access and data extraction on one local legacy system from a previous acquisition. It said findings so far suggest no sensitive data was disclosed, other Maersk systems and partner API and EDI links were unaffected, and customers should see no disruption. WhiteArmor claimed the theft on its leak site, demanding $5 million in Bitcoin for a claimed 100GB tied to Maersk’s OCF/LF logistics platform. Nick Harris said the group has made other logistics-sector extortion demands and describes itself as planning to add ransomware.
Unconfirmed: WhiteArmor’s 100GB claim and contents are unverified; Maersk did not say when access occurred and says no sensitive data appears disclosed.
- WhiteArmor claims driver records, plaintext passwords, staff accounts, receipts, orders and device logs.
- Harris said WhiteArmor demands over the past month ranged from $140,000 to $20 million.
- He named J.B. Hunt, Ryder and Echo Global Logistics among other claimed victims.
- Maersk last reported a major incident in the 2017 NotPetya campaign, which it said may have cost $300 million.
Impact: Claimed theft of logistics data, accounts and plaintext passwords
- Threat actors
- WhiteArmor
From the original article
2 min read at infosecurity-magazine.com
Maersk has revealed a threat actor extracted data from one of its legacy systems
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.