MCAD Maritime Cyber Attack Database
Year2023 |
MonthSeptember |
Reference number20230905 |
Impact areaShore |
Incident locationUSA |
Incident countryUSA |
Victim countryUSA |
Victim identityBorderlon Marine |
Victim TypeShipping company |
MethodRansomware |
In September 2023, Bordelon Marine in the USA was targeted by the Play Ransomware Group. This group, which first appeared in June 2022, has expanded its operations from Latin America to the U.S. and Germany. They are known for their sophisticated attack strategies, including exploiting known vulnerabilities and using tools like AdFind to gather Active Directory information. The attack on Bordelon Marine involved encrypting files with a '.play' extension. The incident is part of a broader trend of increasing ransomware and malware attacks, with the Play Ransomware Group listing six businesses on their data leakage site on the Tor network, indicating potential data breaches.
