Maersk confirms breach as WhiteArmor demands $5 million
Original title: Maersk confirms data breach as WhiteArmor ransomware demands $5 million
The gang claims about 100GB from the former LF Logistics platform, while Maersk says operations are unaffected.
Shipping group Maersk says a threat actor breached a system at a previously acquired company and stole data, while an investigation continues. Ransomware group WhiteArmor listed Maersk and demanded $5 million, claiming about 100GB from the OCF/LF Logistics platform, including driver records and admin accounts. Maersk says the incident is isolated, current evidence shows no sensitive data disclosed, and it does not expect operational disruption.
Unconfirmed: WhiteArmor's data inventory and ransom demand are unconfirmed; Maersk says no sensitive data has been disclosed.
- WhiteArmor publicly demanded USD 5,000,000 in bitcoin within 30 days.
- The group claims nearly 30,000 driver records, plaintext passwords and 33 SUPER_ADMIN accounts.
- It also claims 27,842 device logs containing phone numbers, emails and IMEI numbers.
- Maersk acquired LF Logistics, developer of the OCF platform, in 2022.
- Maersk says it found no impact on other systems, APIs or EDI integrations.
Impact: Claimed theft of logistics and driver records; disclosure unconfirmed
- 1.Treat unexpected messages about the incident cautiously and verify them through usual Maersk contacts.
- Products
- OCF/LF Logistics
- Threat actors
- WhiteArmor
- Victims
- Maersk
- Countries
- Denmark
From the original article
3 min read at bleepingcomputer.com
Maersk announced that a threat actor gained unauthorized access to a local legacy system inherited through an earlier acquisition and extracted data from it. [...]
By Bill Toulas · bleepingcomputer.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.