Denmark's Maersk, one of the world's largest container carriers, confirmed that an attacker gained unauthorized access to a local legacy system inherited through an earlier acquisition and took data from it. The company says the incident is isolated, that evidence so far shows no sensitive data was disclosed, and that there is no impact on other systems or on customer and partner integrations. Customers can keep booking and managing shipments as usual.
The WhiteArmor ransomware gang listed Maersk on its leak site and demanded $5 million in bitcoin within 30 days. The gang says the data came from a platform of LF Logistics, which Maersk acquired in 2022, and includes records of about 30,000 drivers, plaintext passwords, signed delivery receipts and device logs with phone numbers. These claims cannot be independently verified.
Maersk did not say which system was affected or what data was taken, and said it would notify affected parties if needed. The company asks customers and partners to treat any unexpected message claiming to relate to the incident with caution and to verify it with their usual Maersk contact.