Maersk confirms cybersecurity incident involving data theft

Maersk, the world's second-largest container line, said in a November 11 statement that an attacker gained unauthorised access to one of its local legacy systems and extracted data, and that its investigation so far strongly suggests no sensitive data was disclosed.

Why it matters: Maersk's systems carry bookings and shipment management for a large share of world container trade, and its 2017 NotPetya outage showed how a single carrier's IT failure can disrupt global supply chains; the company says customers can keep using its platform.

Data as of Marine Insight report of November 12, 2026, read in full, reporting Maersk's own statement of November 11, 2026. Single trade-press source; the ransomware group's claims about the data taken are its own and were not confirmed by Maersk. Developing item.

Maersk said in a statement published on November 11 that it had identified an IT security incident in which an attacker gained unauthorised access to one of its local legacy systems and extracted data. The company said a full investigation was launched immediately and is ongoing, that findings so far strongly suggest no sensitive data was disclosed, and that customers can keep using its platform for bookings and managing shipments.

A ransomware group calling itself WhiteArmor has claimed responsibility and threatened to release about 100 GB of data, according to the report. Maersk did not confirm those claims and did not link the incident to the group or to its LF Logistics platform by name.

Maersk confirms cybersecurity incident involving data theft

Sources