MCAD Maritime Cyber Attack Database
In July 2021, Japan based Kawasaki Kisen Kaisha (K Line) was hacked. There had been an unauthorised access to the overseas subsidiary systems. The information that was stolen by the hackers was recently published online. “K” Line had just recovered from another attack, which had the same type of attack pattern.
Jun, 2021In June 2021, the AIS signals of two Norwegian Navy corvettes were falsified, creating the illusion that they had departed from Gdynia, Poland, and entered Russian territorial waters near Kaliningrad.
Jun, 2021In June 2021, Wilson, Sons, a major Brazilian logistics company, was attacked by Sodinokibi, leading to operational disruptions.
Jun, 2021In June 2021, the network of the Woods Hole, Martha’s Vineyard and Nantucket Steamship Authority (Boston, MA, USA), doing business as The Steamship Authority, was attacked with a form of ransomware. The ransomware attack involved malware that encrypts files on the network that results in the system becoming inoperable. This implies that there was an inability to change/book reservations, delays during ticketing, and customers are unable to book or change vehicle reservations online or by phone. Cash is preferred for all transactions because the availability of credit card systems is limited. The safety of vessels was never threatened since the cyberattack did not affect radar or GPS functions.
Jun, 2021In June 2021, South-Korea based Daewoo Shipbuilding & Marine Engineering got hacked. With an unknown attack pattern, the hackers managed to hack into the computer systems. the hackers, who are reportedly from either North-Korea or China, did not manage to compromise any data. Reports tell that the hackers were looking for information related to South-Korea’s nuclear submarine program. This has been the second cyber-attack that DSME has suffered.
Jun, 2021In June 2021, South-Korea based HMM (Hyundai Merchant Marine) was hit with a virus. Due to a phishing attack, a virus was able to infiltrate the email systems. HMM said that its email servers in all areas except for America and Europe remain impacted by the unauthorised security breach. Impacted indicates in this scenario that the email system could not be used.
Jun, 2021In 2021, on the 24th of June, an incident involving a British warship near the coast of Russian-occupied Crimea may have started online, with a virtual trip that never took place. After steaming 12 kilometres off the Crimean coast, the HMS Defender grabbed headlines. Those waterways are considered Russian territory by the Kremlin, but they belong to Ukraine for much of the rest of the world. To discourage the Royal Navy vessel, Russia's Defense Ministry claimed it fired warning shots and dropped missiles. The Ministry of Defence of the United Kingdom refuted the assertions. The HMS Defender and a Dutch frigate, HNLMS Evertsen, were seen nearing the port of Sevastopol in Crimea in the early hours of June 19, 2021, according to the site's tracking data. Strangely enough, they were not present. Both ships were docked around 300 kilometres away in Odessa, Ukraine, when Marine Traffic showed them entering Russian-controlled territory, according to a live camera feed. The simulated trip was published on Marine Traffic as a warning by an anonymous person. It was all about provoking a reaction and "deploying disruptive power".
Apr, 2021In April 2021, DarkSide ransomware attacked Condor Ferries, disrupting ferry services.
Apr, 2021In April 2021, Nefilim ransomware attacked Seven Seas, a maritime service provider in Singapore.
Apr, 2021In June 2021, the US Steamship Authority suffered a ransomware attack from an unknown group, causing delays in ferry services.