Plan ahead High Check your exposure
Maersk investigates legacy-system breach after ransomware group's data theft claim
Industrial CyberMaersk, WhiteArmor · transport, shipping and logistics
What happened. A.P. Moller-Maersk says it is investigating unauthorised access to and data extraction from a legacy system inherited through an acquisition. WhiteArmor claims it took about 100GB. Maersk says it has secured the system and reports no impact on other systems.
Who is affected. A.P. Moller-Maersk, in shipping and logistics. Maersk reports no sign of impact on other systems or on connected customer and partner systems. The report does not say whether operational technology (OT) was affected.
What to do. Review any legacy or inherited systems that connect to your logistics, partner or supply-chain platforms, and check their access controls and logs.
Why it matters to your site. Use it to check whether legacy systems from past acquisitions are inventoried, monitored and isolated from your plant and partner links.
When to act. Plan ahead: Transport operators: review legacy and inherited IT systems and their links to plant networks; no OT impact confirmed…
Editor's reading
ForIT securityleadership
- Purdue level
- L4
Why: The affected system is a legacy supply-chain platform, which is a business system at enterprise level (L4).
- Watch for
- Unusual large data transfers out of legacy or inherited systems, including through APIs and electronic data interchange (EDI) links.
- Your own data appearing on leak sites run by WhiteArmor, if you share data with Maersk.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.
Source: Industrial Cyber (opens industrialcyber.co)
More on Transport