MCAD Maritime Cyber Attack Database
Year2024 |
MonthJune |
Reference number20240601 |
Impact areaShore |
Incident locationManila, Philippines |
Incident countryPhilippines |
Victim countryPhilippines |
Victim identityMaritime Industry Authority (MARINA) |
Victim TypeMaritime industry authority |
MethodHacking |
In June 2024, a cyberattack by hacker "Ph1ns" breached the Philippine Maritime Industry Authority (MARINA), exposing critical maritime data, including ship specifications, ownership histories, and operational records. Exploiting vulnerabilities in subdomains, the attacker accessed 91 GB of data, exfiltrating 20 GB. Techniques included fuzzing and file upload manipulation to bypass security, escalating to full administrative control. The breach underscores the importance of strengthening cybersecurity in government systems to prevent data compromise and operational risks in critical infrastructure.
