MCAD Maritime Cyber Attack Database
Year2020 |
MonthDecember |
Reference number20201202 |
Impact areaShore |
Incident locationTromsø |
Incident countryNorway |
Victim countryNorway |
Victim identityCruise company Hurtigruten (2 vessels named 'Fram and Midnatsol') |
Victim TypeShipping Company |
MethodRansomware |
In 2020 a ransomware attack occurred on the Cruise Company Hurtigruten in Norway. The attack took place the 13th of December 2020 on two vessels named 'Fram and Midnatsol’. Customers' data (which includes names dates of birth, passport numbers, email addresses, and phone numbers) was reportedly stolen by hackers using a ransomware virus data assault. The data that was encrypted, had affected visitors who travelled onboard the Fram between 2018 and 2020 and for guests aboard the Midnatsol between 2016 and 2020. Also, the personal information of customers who have been treated by a medical provider during their stay on one of the two ships may have been affected by the attack. Unfortunately, the aim and threat actors of the incident are still unclear. Because of the attack, the enterprise was forced to take the website down. As you can see on the image below, the company's website displayed a message. The company notified appropriate authorities and filed a statement to the Oslo Stock Exchange after discovering the cyberattack on its servers. This cyberattack occurs as Norwegian organizations work together to establish a cyber resilience centre to aid shipowners and management in strengthening their defences. They work together to get an overview of the current situation and to keep the attack from spreading and causing harm.
