Skip to content
Maersk hit by fresh cyber breach

Maersk hit by fresh cyber breach

Splash247 • November 11, 2026

Danish shipping giant AP Moller-Maersk has confirmed another cybersecurity breach after hackers gained access to an older IT system and extracted data, nearly a decade after the devastating NotPetya attack that cost the company up to $300m.

The Copenhagen-headquartered group said on Wednesday that the incident involved a local legacy system inherited through a acquisition.

Maersk’s cybersecurity team launched an investigation after discovering the intrusion and has taken steps to secure the affected system.”Our findings so far strongly suggest no sensitive data has been disclosed,” the company said.

The carrier said the breach appeared to be confined to the legacy system, with no indication that other Maersk systems or those belonging to customers and partners connected through APIs and electronic data interchange (EDI) had been compromised.

The company added that it does not expect disruption to customer operations, with its digital booking and shipment management platforms continuing to operate normally.

Maersk has not identified the acquired business involved, disclosed what data was extracted or named those responsible for the intrusion.

The announcement follows separate claims by a hacker group calling itself WhiteArmor that it had obtained around 100 GB of logistics data from a platform associated with LF Logistics, the Hong Kong-based logistics business Maersk acquired for $3.6bn in 2022.

The group has reportedly demanded $5m in bitcoin. The claims remain unverified, and Maersk has not confirmed any connection between the alleged theft and the incident it is investigating.

The latest breach brings back memories of June 2017, when the NotPetya malware attack crippled Maersk’s IT infrastructure and disrupted container shipping and terminal operations worldwide.

The Danish group subsequently put the financial damage at between $250m and $300m, making it one of the costliest cyber incidents in shipping history.

Extracted Entities

Attack Types (1)

Companies (2)

Malware (1)