Maersk Investigates IT Security Incident with Potential Data Theft
Shipping giant Maersk is probing an IT security incident involving potential data theft from a legacy system, assuring customers that operations remain unaffected.
Global shipping and logistics leader A.P. Moller-Maersk has announced it is investigating an IT security incident that may have resulted in data theft from a legacy system. The company confirmed that the affected system has been secured and that initial findings suggest no sensitive data was disclosed.
In a statement, Maersk emphasized that the incident is isolated to a local system acquired through a previous company acquisition. The company has found no indication of any impact on other Maersk systems or on customer and partner systems that integrate with Maersk via APIs and EDI. Consequently, Maersk does not anticipate any disruption to its ongoing operations.
Customers have been reassured that they can continue to use Maersk's platforms for managing shipments as usual. The company has committed to providing updates as the investigation progresses, urging caution regarding any unexpected communications related to the incident and advising verification through usual Maersk contacts.
This incident, while concerning, appears to be significantly less severe than the devastating NotPetya cyberattack that impacted Maersk in 2017. That attack, attributed to Russian state-sponsored actors, was a destructive wiper malware that caused widespread global disruption and cost Maersk an estimated $300 million in remediation and rebuild expenses.
The NotPetya incident required a massive recovery effort, involving the deployment of approximately 4,000 new servers, 45,000 new PCs, and 2,500 applications, all completed within a ten-day period. Following the aftermath, Maersk also made significant organizational changes, including layoffs at its command and control center.
Maersk stated that cybersecurity remains a constant priority, with rigorous processes in place to identify, prevent, and minimize the impact of security incidents. The company's swift response and containment measures in the current incident aim to prevent a recurrence of the widespread damage seen in 2017.
The investigation is ongoing, and Maersk is working to fully understand the scope and nature of the breach. The company's transparency and proactive communication are crucial in maintaining trust with its global customer base during this period.