Maersk, the Danish shipping company, is investigating unauthorized access to a local legacy system inherited through an earlier acquisition after data was extracted. The company says customers can continue booking and managing shipments.
Maersk said its preliminary findings point to no sensitive information being disclosed. Its Cyber Security team is investigating and has taken steps to protect the affected system. The company said it had seen no signs that the incident reached its other systems or customer and partner systems connected through application programming interfaces (APIs) or electronic data interchange (EDI). It does not expect disruption to customer operations.
Container News reported, citing Danish publication Ingeniøren, that WhiteArmor claimed to have about 100 GB of data associated with a platform formerly operated by LF Logistics. Maersk's statement does not identify that platform or confirm the amount. The reported claim has not been linked to the incident under investigation, and the volume alone does not establish that sensitive information was exposed.
Maersk's 2017 annual report described a separate NotPetya attack in June 2017 that disrupted transport and logistics operations and caused losses of $250 million to $300 million.
The company said it would communicate relevant findings to customers and alert parties if its investigation identifies them as affected. It did not set a date for its next update.
