Maersk confirms a data breach at a legacy system as WhiteArmor ransomware gang ...

Maersk says an attacker accessed and extracted data from a local legacy system inherited through a acquisition; it expects no disruption to operations [1] .

WhiteArmor claims 100GB from the OCF/LF Logistics platform and demands $5 million in bitcoin within 30 days, according to BleepingComputer [2] .

Maersk bought LF Logistics from Li & Fung in 2022 at an enterprise value of $3.6 billion [3] .

A.P. Moller-Maersk said on Wednesday, Nov. 11, that it had found "unauthorised access and data extraction from one of our local legacy systems from a acquisition" [1] . The Danish shipping and logistics group said its findings so far "strongly suggest no sensitive data has been disclosed" and that it had found no sign of impact on other Maersk systems or on customer and partner systems connected through APIs and EDI [1] . It said it does not anticipate disruption to operations and that customers can keep booking and managing shipments as usual [1] .

Maersk did not name the system, the type of data taken or when the intrusion happened [1] [2] . It warned customers to treat unexpected messages claiming to relate to the incident with caution and to verify them through their usual Maersk [1] .

The WhiteArmor ransomware gang listed Maersk on its data leak site over the weekend and publicly demanded $5 million, BleepingComputer reported [2] . "You have 30 days to us and pay USD 5,000,000 in bitcoin," the group wrote [2] . It says it holds 100GB taken from the OCF/LF Logistics platform, the system of Maersk's contract-logistics arm, including nearly 30,000 driver records, plaintext passwords, 33 top-privilege "SUPER_ADMIN" accounts, signed delivery receipts, inventory rows with purchase orders and advance shipping notices, and 27,842 mobile device logs with phone numbers, emails and IMEI numbers [2] . None of these claims has been independently verified, and Maersk has not linked the incident to WhiteArmor or to LF Logistics by name.

Maersk completed its purchase of Hong Kong-based LF Logistics from Li & Fung in August 2022 at an enterprise value of $3.6 billion, adding 223 warehouses and 10,000 employees [3] . The business was rebranded as Maersk [3] .

Maersk was one of the companies hit hardest by the NotPetya malware attack in 2017, which forced it to reinstall 4,000 servers and 45,000 workstations and cost it up to $300 million [2] .