Maersk confirms unauthorised access and data theft from a legacy system it inherited through an acquisition
- Maersk says: the investigation is ongoing, the affected system has been secured, customers can keep booking and managing shipments as usual, and it will inform impacted parties if it finds a need to.
- The group's claim (not confirmed by Maersk): WhiteArmor says it holds about 100 GB from the former LF Logistics contract-logistics platform, including driver and employee accounts, and is demanding US$5 million in bitcoin. Treat those figures as the attacker's claim.
- For partners and LF Logistics users: watch for phishing that references shipments, delivery receipts or account resets, and change any password reused from that platform.