MCAD Maritime Cyber Attack Database
In June 16, 2025 amid rising tensions linked to the Israel–Iran conflict, maritime authorities have reported a surge in electronic interference, particularly GPS jamming and AIS spoofing, affecting vessels in the Strait of Hormuz and surrounding Gulf waters. The UK Maritime Trade Operations (UKMTO) and other monitoring agencies have warned of increasing navigational disruptions that compromise ship positioning and safety. These incidents, believed to be deliberate, have forced vessels to rely on manual navigation and heightened operational vigilance. The interference poses serious risks to regional shipping, especially in key transit corridors for global energy flows.
Jun, 2025A collision between two oil tankers in the Gulf of Oman in June, 17 2025 has raised concerns about electronic interference, particularly GPS and AIS jamming, as contributing factors. While UAE authorities officially cited navigational error, maritime cybersecurity experts suspect that deliberate signal disruption may have impaired both vessels’ navigation and tracking systems. Reports indicate one ship experienced loss of accurate GPS data and anomalies in AIS transmissions before the incident. This suggests that spoofing or jamming may have obscured vessel positions or misled onboard systems. The incident highlights the growing threat of electronic interference to maritime safety in geopolitically sensitive regions like the Gulf, where such tactics are increasingly believed to endanger commercial shipping.
Jun, 2025In June 17, 2025, vessels sailing near Iran, including oil tankers such as Front Tyne, were observed appearing on tracking systems in implausible locations, e.g. rural Russia, due to widespread GPS jamming. Maritime data analysts and satellite imagery confirmed that the ships never physically left the Gulf region, suggesting a significant increase in electronic interference affecting GPS accuracy. The jamming incidents, likely deliberate, caused vessels to transmit false positions thousands of kilometers from their actual location.
Jun, 2025Buffalo Marine Service, a U.S.-based inland waterway towing company, was targeted in a ransomware attack discovered on June 27, 2025, reportedly carried out by the Qilin group. While no personal data was exposed, leaked documents related to internal operations suggest a significant breach, underscoring cybersecurity risks in the maritime sector.
May, 2025In May 2025, Japanese shipbuilding company NSS (長崎船舶装備株式会社) fell victim to a ransomware attack by the Qilin group. The breach, discovered on May 6, led to the exposure of internal documents, including operational data and screenshots, on Qilin's dark web leak site.NSS, established in 1943, plays a significant role in Japan's maritime industry, specializing in interior construction for ships. The attack underscores the growing need for enhanced cybersecurity measures in maritime manufacturing industries
May, 2025The Integral Port Administration of Baja California Sur (API-BCS) confirmed a cyberattack on its digital information system, in May 2025. They stated that no financial losses or public resource theft occurred. The main impact was temporary restricted access to digital data, though all fiscal year 2024 records remain intact in physical and accounting backups. Data recovery is ongoing, and API-BCS has formally requested a 30-day extension from the State Congress to ensure compliance with financial reporting requirements. The agency reaffirmed its commitment to transparency and accountability, promising continued updates to the public and oversight bodies.
May, 2025In May 2025, two Very Large Crude Carriers (VLCCs), the Norns and the Crystal, have reportedly used AIS spoofing to hide their true locations and activities while transporting combined cargoes of Russian and Chinese oil to Venezuela. Satellite imagery confirmed that both vessels docked at the oil port of Jose, despite their AIS signals indicating they were elsewhere. Norns was off Brazil signaling for Angra dos Reis, and Crystal spoofing a loading operation near an FPSO off Guyana. This deliberate AIS manipulation misled trackers and authorities about their actual routes and destinations.
May, 2025A Mediterranean Shipping Company (MSC) container vessel ran aground near Jeddah and is suspected to have been a victim of GPS spoofing. The incident, which occurred in a high-risk region for maritime navigation interference, highlights growing concerns over the manipulation of positioning systems. Experts suggest the ship’s navigation may have been deceived by false GPS signals, a tactic increasingly seen in politically sensitive maritime zones. Investigations are ongoing to confirm the cause and assess the implications for vessel safety in the region.
May, 2025Ghent Dredging, a Belgian construction firm, was targeted by the Akira ransomware group on May 23, 2025, resulting in the leak of 16 GB of corporate data, including financial records and employee documents. While no download links were posted, the breach highlights serious risks to operational confidentiality and underscores the need for stronger cybersecurity in the marine and construction sectors.
Apr, 2025In April 2025, Taiwanese container shipping company Wan Hai Lines experienced a cyberattack that disrupted its public-facing website starting on April 18. The company confirmed the incident in a stock exchange filing, stating that there was no significant impact on its operations and no breach of internal or employee information. Wan Hai promptly initiated cybersecurity response measures, engaged external cybersecurity experts, and reported the matter to relevant authorities. As of April 21, the website was back online with added security measures, including anti-DDoS identity verification steps.