WhiteArmor Demands $5 Million After Maersk Legacy System Breach
A.P. Moller-Maersk is investigating a data breach of a legacy system after the WhiteArmor extortion group demanded $5 million to prevent a data leak.
The extortion group WhiteArmor has claimed responsibility for a data breach involving a legacy IT system owned by A.P. Moller-Maersk. The compromised system belonged to LF Logistics, a Hong Kong-based company Maersk acquired in 2022. WhiteArmor alleges it stole 100 gigabytes of data, including plaintext passwords, super-administrator accounts, driver records, and mobile device logs.
The attackers have demanded a $5 million payment in bitcoin within 30 days to prevent the public release of the files. WhiteArmor has recently targeted other logistics firms, including Ryder, J.B. Hunt, and Echo Global Logistics, and has indicated an intent to expand its operations from data-theft extortion into full ransomware attacks.
A.P. Moller-Maersk stated that the incident is isolated to a local system and found no indication of impact on other company systems or partner integrations. The company maintains that current findings strongly suggest no sensitive data has been disclosed and that customer operations remain undisrupted. WhiteArmor reported that Maersk has not yet contacted them to negotiate.
