MCAD Maritime Cyber Attack Database
Arcese, an Italian logistics company, was hit by a ransomware attack from Conti in 2022. Known for its large-scale ransomware operations, Conti’s attack disrupted logistics services across Europe, highlighting the persistent threat to transportation companies from ransomware groups tied to Russia.
Mab Group, a manufacturing company based in Europe, was targeted by the Snatch ransomware group in 2022. The Snatch group, known to have Russian affiliations, uses a unique approach of rebooting infected machines into Safe Mode before encrypting data. The attack disrupted Mab Group's manufacturing processes, emphasizing the growing trend of ransomware targeting industrial sectors where production downtime can lead to significant financial losses.
Hyundai Samho Heavy Industries, a major South Korean shipbuilding company, faced a ransomware attack from Hive in 2022. Hive, a group with suspected Russian origins, disrupted the company’s shipbuilding operations, which have global implications in maritime construction and trade. The attack highlighted how ransomware can impact large industrial manufacturers, potentially delaying projects and leading to considerable financial damage.
In 2022, TVS Supply Chain Solutions, an Indian logistics and supply chain company, became a victim of a ransomware attack by Karakurt. The Karakurt group, associated with Russia, often focuses on data exfiltration before encryption to increase the pressure on victims. The attack disrupted the company's logistics services, affecting the movement of goods across supply chains in various sectors.
Imenco, a Norway-based provider of marine and subsea solutions, was targeted by the Conti ransomware group in 2022. The Russia-linked Conti group’s attack impacted the company’s ability to deliver underwater and offshore technology solutions, illustrating the increasing threat of ransomware to specialized sectors like marine engineering.
The Italian yacht manufacturer Azimut Benetti Group suffered a ransomware attack from the Conti group in 2022. This attack underscored the risk of ransomware targeting high-end manufacturing industries, where disruptions can impact production timelines and customer satisfaction.
Tingtong Logistics Group, a China-based logistics company, was attacked by LockBit 2.0 in 2022. LockBit 2.0, with Russian affiliations, targeted the company’s logistics operations, which disrupted the flow of goods and impacted supply chains. The incident highlighted the increasing trend of ransomware targeting logistics firms in Asia.
In 2022 the PetroVietnam Technical Services Corporation, a vital player in Vietnam's oil and gas industry, suffered a ransomware attack by Karakurt. The group, associated with Russian cybercriminals, exploited the vulnerabilities in the company’s networks, affecting its oilfield services and offshore engineering projects.
Swedish shipping company Furetank was hit by Play ransomware in 2022. The attack, suspected to be linked to Russia, disrupted the company's tanker operations, demonstrating the risks that ransomware poses to maritime businesses, especially those involved in transporting essential energy products.
In 2022, Vals Anderson Shipagency, a ship agency in Sweden, experienced a ransomware attack by Play. The incident disrupted the company’s shipping coordination services, reflecting the increasing targeting of smaller maritime firms by ransomware actors seeking to exploit the sector's interconnected nature.