MCAD Maritime Cyber Attack Database
Year2017 |
MonthMay |
Reference number20170501 |
Impact areaShore |
Incident locationLondon |
Incident countryUK |
Victim countryUK |
Victim identityClarksons Shipbroker |
Victim TypeShipping Broker |
MethodHacking |
Clarksons Shipbroker got hit by a hacking attack in the UK. Through the forensic investigation, Clarksons quickly learned that an unauthorized third party had gained access to its system from May 31, 2017 until November 4, 2017. The unauthorized third party accessed certain Clarkson PLC information systems through a single, isolated user account in the UK, then copied data and demanded a ransom for his safe return. The data, which the perpetrator copied and demanded ransom for return, included: date of birth, contact information, medical information, tax information, insurance information, social security number, resume, driver license information, bank account data, passport information, payment card information, ethnicity, digital signature, financial information, and criminal background information. The stock value decreased by 5% immediately after the incident. Clarksons said that it had been working with data security specialists to investigate the matter further. It is understood that it refused to do a deal with the blackmailer, hence its warning that some data might enter the public domain
