Maersk Investigates Data Extraction From Legacy System

A.P. Moller-Maersk said unauthorized access and data extraction affected one local legacy system inherited through an acquisition, while its investigation has found no indication of wider system impact or expected customer disruption.

In a security advisory on November 11, the shipping company said preliminary findings suggested no sensitive information had been disclosed. It said its cybersecurity team began investigating after discovering the incident and took steps to secure the affected system. The investigation is ongoing.

Maersk said it had found no indication that other company systems, or customer and partner systems connected through application programming interfaces (APIs) and electronic data interchange (EDI), were affected. Customers can continue to book and manage shipments through Maersk platforms, and the company does not expect operational disruption.

The company has not identified the affected application, the types of data extracted, or when the intrusion occurred. Its statement also does not explain how access was gained. Maersk said it would provide updates as relevant findings become available and notify affected parties if warranted.