Maersk confirms data theft amid $5 million WhiteArmor extortion claim
Original title: Maersk Confirms Data Theft Amid $5 Million Extortion Attempt
The Danish shipper says the intrusion is limited to a system inherited in an acquisition and expects no disruption to bookings.
Maersk said on November 11 that attackers extracted data from one IT system inherited through an earlier acquisition. The company said findings so far strongly suggest no sensitive data was disclosed, that the incident is isolated, and that shipping platforms remain available. WhiteArmor listed Maersk on its leak site on November 7 and demanded $5 million in bitcoin within 30 days. Maersk has not confirmed the group, the data types, when the intrusion occurred, or how access was gained.
Unconfirmed: WhiteArmor's data claims and involvement are unverified; Maersk has not confirmed the group or what was stolen.
- WhiteArmor claims about 100GB from a platform associated with LF Logistics, acquired in 2022.
- The group claims roughly 29,000 driver records, including 16,093 with plaintext passwords.
- It also claims 16,123 staff accounts, 33 with superadministrator privileges, and over 27,000 device logs.
- Maersk said it found no impact on other systems or on customer and partner API and EDI connections.
- The investigation is ongoing; affected parties will be notified if necessary.
Impact: Data extracted from one acquired IT system; gang claims passwords and staff records
- Threat actors
- WhiteArmor
- Victims
- Maersk
- Organizations
- LF Logistics
- Countries
- Denmark
From the original article
2 min read at securityweek.com
The WhiteArmor ransomware group claims it stole 100GB of data from the shipping giant’s systems. The post Maersk Confirms Data Theft Amid $5 Million Extortion Attempt appeared first on SecurityWeek.
By Eduard Kovacs · securityweek.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.