WhiteArmor demands $5 million from Maersk, claims 100GB theft
Original title: WhiteArmor Demands $5 Million from Maersk, Claims Theft of 100GB of Data
Maersk confirms extraction from one acquired legacy system but says findings suggest no sensitive data was disclosed.
A.P. Moller-Maersk said it found unauthorized access and data extraction from one local legacy system inherited from a previous acquisition. The company says the incident appears isolated, with no impact on other Maersk systems or connected customer and partner systems, and it does not expect shipment disruption. WhiteArmor listed Maersk on its leak site, demanded $5 million in Bitcoin within 30 days, and claimed about 100GB from the OCF/LF Logistics platform. Those data claims are unverified, and Maersk has not confirmed them.
Unconfirmed: WhiteArmor’s data inventory and $5 million demand are attacker claims; Maersk says findings so far strongly suggest no sensitive data was disclosed.
- Maersk published its statement on November 11 and did not name the system or intrusion date.
- WhiteArmor claims nearly 30,000 driver records, plaintext passwords, and 33 super admin accounts.
- The group also claims inventory records, purchase orders, and 27,842 mobile device logs.
- Maersk acquired LF Logistics from Li & Fung in 2022 but has not linked that platform to the incident.
Impact: Data extracted from one legacy Maersk system
- Threat actors
- WhiteArmor
- Victims
- Maersk
- Countries
- Denmark
From the original article
3 min read at securityaffairs.com
Maersk confirms a data breach involving a legacy system, while WhiteArmor claims 100GB of stolen data and demands a $5 million ransom. A. P.
By Pierluigi Paganini · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.