Ethical Hacking News
A.P. Moller Maersk has been hit by a significant data breach, with a local legacy system compromised and approximately 100GB of data stolen. The cybercrime group WhiteArmor claims to have stolen sensitive information, including driver records and passwords. The group has demanded a $5 million ransom in Bitcoin. Maersk's response to the incident demonstrates the company's commitment to protecting its customers' data, but the incident raises questions about the effectiveness of cybersecurity measures and the need for greater collaboration between companies and governments to prevent and respond to cyberattacks.
Maersk, a large shipping and logistics company, suffered a significant data breach resulting in the theft of approximately 100GB of data. The stolen data includes nearly 30,000 driver records, 33 super admin accounts, and signed delivery receipts. WhiteArmor, a cybercrime group, demanded a $5 million ransom in Bitcoin in exchange for the data. The incident is isolated to a local system, and Maersk assures customers that no sensitive data has been disclosed. The attack highlights the growing threat of cyberattacks on global supply chains and the importance of robust cybersecurity measures. Maersk's response demonstrates the company's commitment to protecting its customers' data, but raises questions about the effectiveness of cybersecurity measures. The incident emphasizes the need for greater collaboration between companies and governments to prevent and respond to cyberattacks.
A.P. Moller Maersk, one of the world's largest integrated shipping and logistics companies, has been hit by a significant data breach. According to the company, a local legacy system was compromised, resulting in the theft of approximately 100GB of data. The cybercrime group WhiteArmor claims to have stolen sensitive information, including nearly 30,000 driver records, passwords stored in plain text, 33 super admin accounts, and signed delivery receipts. The group has demanded a $5 million ransom in Bitcoin, citing the value of the stolen data as roughly four hours of the company's EBITDA.
Maersk's cybersecurity team began investigating the incident as soon as they were notified, and swift action was taken to secure the affected system. The company assures customers that the incident is isolated to the local system and that no sensitive data has been disclosed. However, the scale of Maersk's operations and the interconnectedness of its IT systems make cybersecurity a major concern. The company's reliance on global trade and supply chains, as well as its 700 container ships and 60 terminals across 35 countries, makes it a prime target for hackers.
In 2017, Maersk was forced to reinstall more than 4,000 servers and 45,000 workstations from scratch after a NotPetya ransomware attack. The attack resulted in damages of up to $300 million and demonstrated the importance of robust cybersecurity measures for large organizations. Maersk's reported revenue of $54 billion in 2025 and its reliance on IT systems to manage its logistics and supply chain operations make it essential to take proactive measures to prevent similar incidents.
WhiteArmor, the group behind the cyberattack, has been involved in several high-profile hacking incidents in the past. The group claims to have stolen inventory records, purchase orders, advance shipping notices, and 27,842 mobile device logs containing phone numbers, email addresses, and IMEI numbers. However, the authenticity of these claims has not been independently verified by Maersk.
The incident highlights the growing threat of cyberattacks on global supply chains and the importance of robust cybersecurity measures for large organizations. Maersk's response to the incident, including swift action to secure the affected system and assurance to customers that the incident is isolated, demonstrate the company's commitment to protecting its customers' data.
The incident also raises questions about the effectiveness of cybersecurity measures and the need for greater collaboration between companies and governments to prevent and respond to cyberattacks. As the global supply chain becomes increasingly dependent on IT systems, the risk of cyberattacks will only continue to grow. It is essential that companies like Maersk take proactive measures to protect their data and that governments provide adequate support and resources to help prevent and respond to cyberattacks.
In conclusion, Maersk's data breach is a significant incident that highlights the growing threat of cyberattacks on global supply chains. The company's response to the incident, including swift action to secure the affected system and assurance to customers that the incident is isolated, demonstrate the company's commitment to protecting its customers' data. However, the incident also raises questions about the effectiveness of cybersecurity measures and the need for greater collaboration between companies and governments to prevent and respond to cyberattacks.
Related Information:
https://www.ethicalhackingnews.com/articles/Maersks-Data-Breach-A-5-Million-Ransom-Demanded-by-WhiteArmor-ehn.shtml
https://securityaffairs.com/202869/data-breach/whitearmor-demands-5-million-from-maersk-claims-theft-of-100gb-of-data.html
Published: Wed Nov 11 16:09:51 2026 by llama3.2 3B Q4_K_M
