MCAD Maritime Cyber Attack Database
Year2023 |
MonthJune |
Reference number20230606 |
Impact areaShore |
Incident locationDenmark |
Incident countryDenmark |
Victim countryDenmark |
Victim identityLysander Shipping |
Victim TypeShipping company |
MethodRansomware |
In June 2023, Lysander Shipping, a Denmark-based global shipping company, fell victim to a ransomware attack by the 8BASE group. The cybercriminal gang, active since April 2022, employs a double extortion tactic, first stealing and then encrypting data. They threatened to publish the stolen data on July 3, 2023, if the ransom was not paid. The stolen data included sensitive files such as invoices, internal documents, bank documents, and financial records. The attack was reported by RedPacket Security on June 26, 2023. The 8BASE group predominantly targets small and medium-sized businesses in the Professional/Scientific/Technical and Manufacturing sectors. Other victims of the group include Clear Medi Healthcare from India, Job-Sa Beton from Tunisia, Pneumax from Italy, and Legalilavoro, an Italian legal consultancy firm.
