Malware
Massive Cyberattack Paralyzes DP World Ports, Stranding Countless Containers
Unprecedented cyberattack cripples DP World Ports, leaving countless containers stranded. Learn about the massive disruption and its far-reaching consequences.
DP World Cyberattack Blocks Thousands of Containers in Ports
A cyberattack on international logistics firm DP World Australia has severely disrupted the regular freight movement in multiple large Australian ports.
DP World, with an annual revenue of over $10 billion, specializes in cargo logistics, port terminal operations, maritime services, and free trade zones.
It operates 82 marine and inland terminals in 40 countries, handling approximately 70 million containers carried annually by 70,000 vessels, which accounts for roughly 10% of the global container traffic.
In Australia, DP World has a significant presence, handling 40% of the nation’s container trade. It operates logistics terminals in the ports of Bing Bong, Fremantle, Brisbane, Sydney, and Melbourne.
According to a statement shared with IT Services, a cyberattack on Friday, November 10 disrupted landside freight operations at DP World’s ports.
In response, the company activated its emergency plans and engaged with cybersecurity experts to overcome the problems caused by the incident. Currently, key systems required to resume normal business operations are being tested.
Since Friday, approximately 30,000 shipping containers of varying importance and value have remained unmoved and crowded the available storage spaces. Operations are gradually being restored.
The estimated damages are in the millions of dollars, as many of the stranded containers hold time-sensitive goods such as blood plasma, wagyu beef, and lobsters.
The media statement also mentions the possibility of data access and exfiltration. However, an internal investigation is still ongoing and has not confirmed this.
“A key line of inquiry in this ongoing investigation is the nature of data access and data theft,” reads the media statement.
“DP World Australia appreciates this development may cause concern for some stakeholders […and] is working hard to assess whether any personal information has been impacted, and has taken proactive steps to engage the Office of the Australian Information Commissioner,” – DP World Australia
Data theft is typical in ransomware attacks as it puts more pressure on the victim to pay a ransom. Currently, the company has not made any statement about threat actors stealing files from its network.
At the time of writing, no known ransomware group has taken responsibility for attacking DP World.