MCAD Maritime Cyber Attack Database
In September 2020, London (England) based Red Funnel experienced a hack on their IT System. The hackers launched a malicious cyberattack against the organization’s IT systems. Online and telephone bookings and timetable systems went down. Ticket purchasing is available only at walk-up service desks. According to Red Funnel, data theft does not appear to be a motive, as there is no evidence of personal data leaks.
Sep, 2020In September 2020, the London (England) based United Nations International Maritime Organization (UN IMO) experienced a cyberattack on their IT Systems. Verry little information is known about the incident, only that the website and the intranet of UN IMO was down for a 48 hour period.
Sep, 2020In August 2020, Miami (USA) based Carnival corp. experienced a ransomware attack on their network. The hackers used the ransomware to attack one of the brands IT systems and partly encrypt certain data files. As a result of this attack, there can be potential claims from guests, employees, shareholders, or regulatory agencies. This has been the second cyber-attack on Carnival Corp.
Sep, 2020In September 2020, the Metapack Overseas Express Shipping Company experienced a ransomware attack on their network by the hack group LockBit. The company's network got infected, allegedly by a phishing email. Eventually, the company's data got encrypted. The attackers used dark web forum platforms and their own blogs to intimidate victims into paying the ransom after the attack. In addition to intimidating current victims, this tactic can also serve as a warning to future victims to show them the consequences of not paying a ransom. The impact of the attack was the leakage of the companies database, which contains 5.8 million records consisting of PII and internal documents.
Sep, 2020In September 2020, the Greece based Diana Shipping Company experienced a ransomware attack on their network. The egregor hack group breaches the data and then proceeds to encrypt it. With their campaign being financial gain, the groups sets the ultimatum of either publishing all stolen data or receiving a ransom from the company.
Sep, 2020In September 2020, the Denmark based Blue Water Shipping Company experienced a malware attack on their network. In order to prevented escalation of the cyberattack, that would have led to a big data breach, the company detected the suspicious activities early on and in response directly followed the IT security procedure. By shutting down the website, the company put a halt to the cyberattack. Only internet-based communications were temporarily unavailable. After further investigation, it appears that there has been a possible information theft of about 1400 employees.
Sep, 2020In September 2020, the AIS location of the HMS Queen Elizabeth, British HMS Duncan and HMS Albion, Dutch HNLMS Rotterdam and HNLMS Johan de Witt and Belgian BNS Leopold was spoofed. By fabricating the AIS locations of these vessels, the threat actor Russia positions the navy vessels near the Russian controlled waters. While in reality the vessels are nowhere near the fabricated position and are actually somewhere else. The reason Russia does this, is provocation. This substantiates Russian aggressive behaviour in response to what appears to be a naval raid. In other words, these ghost readings could be about painting Russia as the victim of international prodding. There have been nearly a hundred of these incidents with NATO naval vessels.
Sep, 2020In September 2020, the AIS location of the U.S. survey vessel USNS Bruce C. Heezen was spoofed. By fabricating the AIS locations of the U.S. survey vessel USNS Bruce C. Heezen, the threat actor Russia positions the navy vessel near the Russian controlled waters. While in reality the vessel is nowhere near the fabricated position and is actually somewhere else. The reason Russia does this, is provocation. This substantiates Russian aggressive behaviour in response to what appears to be a naval raid. In other words, these ghost readings could be about painting Russia as the victim of international prodding. There have been nearly a hundred of these incidents with NATO naval vessels.
Jun, 2020Shipping Company Vard Group from Langsten, Norway was hit by a ransomware attack in July, 2020 by Russian hacker group REvil (Sodinokibi/Sodin). The group demanded a $5.5 million ransom after infecting the company's servers. Afraid of potential loss of personnel, the company send out text messages to many of its employees that the disruption might lead to the shut down of the ship building unit resulting in temporary job loss to many if necessary.
Jun, 2020In June 2020, the Macedonia based FERSPED Inc. experienced a ransomware attack on their network. The maze group are the hackers responsible for the attack. The impact of the attack was the exposure of database files. A few months later, maze group announced their retirement.