MCAD Maritime Cyber Attack Database
Caldwell Marine International, LLC, a U.S.-based marine contractor, fell victim to a ransomware attack by Conti in 2022. Conti, originating from Russia, is notorious for targeting industrial and infrastructure firms. The attack disrupted marine construction and engineering services, showcasing how ransomware can have significant impacts on companies involved in critical infrastructure projects.
Spirit International Transport, Inc., a U.S.-based logistics company, was targeted by LockBit 2.0 in 2022. LockBit 2.0, believed to have Russian origins, is known for its ransomware-as-a-service model, allowing affiliates to deploy attacks against various industries. The incident disrupted logistics operations.
Ecuador’s logistics firm Remar, also known as ULOG Ecuador, suffered a ransomware attack by LockBit 2.0 in 2022. The Russia-linked group exploited the company’s vulnerabilities, affecting logistics services across the region. This attack underscored how ransomware poses significant risks to logistics companies.
In 2022, the U.S.-based MODE Transportation, a logistics and supply chain management company, was targeted by LockBit 2.0. Known for its sophisticated encryption techniques, the ransomware group disrupted logistics operations, emphasizing the increasing frequency of ransomware incidents within the logistics sector.
In 2022, Florida Marine Transporters, a U.S.-based marine transportation company, faced a ransomware attack from the Russia-affiliated Hive group. Hive’s attacks typically involve encrypting sensitive data, with significant impacts on companies involved in marine logistics, where operational downtime can result in substantial financial losses.
In 2022, GIS Inspection Services, based in the U.S., was targeted by the Cuba ransomware group. The group, suspected of having Russian ties, focuses on industrial sectors, with the attack disrupting inspection services critical for safety and regulatory compliance.
J.M. Rodgers Co., Inc., a U.S.-based customs brokerage and logistics company, was targeted by BlackBasta in 2022. The ransomware group’s attack impacted the company’s ability to facilitate customs processes, affecting the flow of goods across borders and underscoring once again the ransomware risks to international logistics.
The French defense and technology firm Thales Group suffered a ransomware attack by LockBit 3.0 in 2022. The attack targeted the company's advanced technology and defense services, illustrating the potential dangers ransomware poses to organizations that offer external service to the maritime sector.
Womgroup, a global company with operations in Brazil, faced a ransomware attack by LockBit 3.0 in 2022. The incident affected the company’s logistics and distribution services, emphasizing the increased targeting of companies with connections to maritime by ransomware groups.
In 2022, Marquard & Bahls Group, a Germany-based company that is active in the fields of energy and chemicalswas targeted by Alphv with a ransomware malware. The Russia-linked group exploited the company's global operations to demand a ransom, showing how ransomware actors target firms with diverse business interests for maximum impact.