Maritime Computer Emergency Response Team ADMIRAL dataset ADMIRAL dataset

Maritime cybersecurity for year 2022 - Disclosed incidents

87 maritime cybersecurity incidents found for 2022

Incidents table - Year 2022

Date Country Incident type Victim Incident summary
26/12/2022 PT Virus/Ransomware Port The largest port administration of the country is hit by a ransomware attack.
20/12/2022 DE Undisclosed Shipyard The head-branch of a naval shipyard and marine material company is hit by a cyber attack.
02/12/2022 SG Undisclosed IT Services A fleet tracking software provider is hit by a cyber attack and its cloud service is disrupted.
24/11/2022 FR Phishing Port A ports actors association is hit by a phishing campaign.
04/11/2022 US Virus/Ransomware Logistics A port logistic actor is hit by a ransomware attack.
17/10/2022 NL Virus/Ransomware Port An international port operator is hit by a ransomware attack.
15/10/2022 BG Denial of Service Port Several web applications of ports and maritime administrations are targeted by a DDoS attack.
12/10/2022 US Virus/Ransomware Port An organisation managing the storage and transfert of vehicles within ports is hit by a ra/nsomware [...]
09/10/2022 FR Virus/Ransomware Organisation A conglomerate linked to the maritime world is hit by a ransomware.
04/10/2022 US Virus/Ransomware Industry A company working for complex subsea operations is hit by a ransomware attack.
03/10/2022 ID Data leak Shipowner Ships CCTV pictures are available online.
18/09/2022 PH Virus/Ransomware Port A port actor working in LPG is hit by a ransomware attack.
15/09/2022 SG Virus/Ransomware Port A port actor is hit by a ransomware attack.
13/09/2022 CN Phishing Education An education and research center claimed to be hit by advanced phishing and intrusion activities.
06/09/2022 JP Denial of Service Port The website of a Port Authority is targeted by a Distributed Denial of Service attack.
05/09/2022 PA Virus/Ransomware Logistics A multimodal logistics actor is hit by a ransomware attack.
02/09/2022 SA Virus/Ransomware Logistics A multimodal logistics actor is hit by a ransomware attack.
31/08/2022 SG Intrusion Shipyard An offshore platform and ship builder detects an intrusion into its IT systems. Personal data leak.
25/08/2022 SG Data leak Logistics A database concerning an ongoing developped tool is leaked.
18/08/2022 FR Data leak Industry A company linked to naval defence industry claims to be affected by a data leak.
17/08/2022 IL Phishing Shipowner A state actor is said to have targeted shipping industry.
06/08/2022 BG Virus/Ransomware Logistics A freight transport company is hit by a ransomware
01/08/2022 IT Data leak Defence A company working in the missile industry for the maritime sector is concerned by a data leak relati[...]
22/07/2022 FI Virus/Ransomware Logistics An important manufacturer of electric - electronic - IT and OT equipment for the maritime sector is [...]
22/07/2022 PH Virus/Ransomware Education A maritime academy is hit by a ransomware attack. Database leaked is seen on sale the following days[...]
14/07/2022 US Virus/Ransomware Shipowner A shipowner of barges and tugs is hit by a ransomware attack.
11/07/2022 TR Data leak Ship A company working in the maritime satellite telecommunication ecosystem is hit by a ransomware threa[...]
06/07/2022 FR Virus/Ransomware Industry A supplying company for port and naval sector is hit by a ransomware attack. Data leak.
04/07/2022 FR Website Compromission Organisation The website of a non profit organisation linked to the naval sector is compromised.
04/07/2022 GB Virus/Ransomware Shipowner A ferry company is hit by a ransomware attack.
02/07/2022 US Virus/Ransomware Logistics A multimodal logistics company is hit by a ransomware attack.
30/06/2022 AU Phishing Offshore Phishing campaign from April to June targets offshore windfarms operators.
29/06/2022 TR Virus/Ransomware Logistics A maritime freight company is hit by a cyberattack.
29/06/2022 US Virus/Ransomware Industry A company providing solutions for the submarine and oceanographic and defence industries is hit by a[...]
29/06/2022 IN Virus/Ransomware Logistics Shipping solution company hit by cyberattack.
28/06/2022 TW Data leak Port Database on ships and their load transiting through a Taiwanese port is published.
24/06/2022 LT Virus/Ransomware Shipowner A ferry company is hit by a cyberattack.
14/06/2022 ID Virus/Ransomware Industry A company working in the oil and gas sector is hit by a ransomware attack.
12/06/2022 US Virus/Ransomware Industry A company working in the oil and gas sector is hit by a ransomware attack.
10/06/2022 CY Virus/Ransomware Logistics A maritime freight company is victim of a ransomware attack.
06/06/2022 ID Virus/Ransomware Logistics A logistics company is hit by a ransomware attack.
04/06/2022 JP Virus/Ransomware Logistics A freight forwarding company is victim of a ransomware attack.
03/06/2022 US Virus/Ransomware Logistics A multimodal logistics company is hit by a ransomware attack.
02/06/2022 IT Denial of Service Port Several web applications of ports are targeted by a DDoS attack.
01/06/2022 JP Data leak Fishing A fishery cooperative's customer information have been leaked due to an infection by the Emotet malw[...]
24/05/2022 CY Data leak Administration A database containing the affiliates of a political body related to the maritime world is sold onlin[...]
23/05/2022 GB Denial of Service Fluvial The Internet website of a fluvial port is hit by a DDoS attack.
21/05/2022 TW Virus/Ransomware Logistics A multimodal logistics company is hit by a ransomware attack. Data leak.
13/05/2022 US Virus/Ransomware Industry A company working in the manufacturing and sale of marine equipment is victim of a ransomware attack[...]
10/05/2022 US Virus/Ransomware Fishing A fishery company is hit by a ransomware attack.
29/04/2022 US Virus/Ransomware Industry An industry company working for the maritime sector is hit by a ransomware attack.
27/04/2022 GR Virus/Ransomware Shipowner A shipowner working in the ferry industry is victim of a ransomware attack.
26/04/2022 PE Virus/Ransomware Industry An industry company working on maritime pier construction is hit by a ransomware attack.
23/04/2022 DE Virus/Ransomware MRE A compagny working in the on shore and offshore windturbines market is hit by a ransomware attack.
20/04/2022 GR Virus/Ransomware Shipowner A shipping compagny is hit by a ransomware attack.
19/04/2022 GB Scam Insurer The client of a maritime insuring company is victim of a financial scam.
17/04/2022 GB Virus/Ransomware Shipowner A ferry company is hit by a cyberattack.
15/04/2022 IQ Virus/Ransomware Port A multimodal port is targeted by a ransomware attack.
14/04/2022 OM Virus/Ransomware Port A port is targeted by a ransomware attack.
13/04/2022 US Intrusion Undersea cable A telecommunications company operating a submarine cable is victim of a computer attack on the cable[...]
31/03/2022 DE Virus/Ransomware MRE A MRE specialized company is hit by a ransomware cyber attack.
31/03/2022 GB Virus/Ransomware Shipowner A company specialized in the rental of luxury yachts is hit by a ransomware attack.
25/03/2022 US Spearphishing Port Several websites of the US Maritime Transportation System are spoofed in order to operate cyberattac[...]
18/03/2022 LB Virus/Ransomware Logistics A multimodal transport company is hit by a ransomware attack.
07/03/2022 DE Spearphishing Shipowner The website of a shipowner is counterfeit to operate spear phishing activities.
28/02/2022 US Virus/Ransomware Manufacturer A marine construction company is hit by a cyberattack.
26/02/2022 UA GPS/AIS jamming/spoofing Ship Several cases of AIS spoofing in the context of the Russian/Ukraine conflict. Probably achieved out [...]
24/02/2022 US Intrusion MRE An cyberattack on the ground segment of a satellite communication companyleads to the loss of the re[...]
23/02/2022 IL Data leak Port Political Hacker group publishes port restricted CCTV footage
21/02/2022 KR Virus/Ransomware Shipyard A shipyard is hit by a cyberattack.
21/02/2022 IN Virus/Ransomware Port A port is targeted by a cyberattack. Ships are diverted from this destination to compensate for the [...]
20/02/2022 GB Virus/Ransomware Shipowner A luxury cruising company is targeted by a ransomware attack.
20/02/2022 US Virus/Ransomware Logistics A worldwide logistics company is hit by a ransomware attack.
14/02/2022 DE Virus/Ransomware Industry A maritime engineering company is hit by a ransomware attack.
09/02/2022 VN Virus/Ransomware Industry A company working in the oil and gas sector is hit by a ransomware attack.
07/02/2022 GB Intrusion Shipowner A ferry company is victim of an intrusion. Personal data leak.
05/02/2022 US Virus/Ransomware Logistics A multimodal transport company is hit by a ransomware attack.
05/02/2022 VN Virus/Ransomware Industry An oil company is hit by a ransomware attack.
01/02/2022 IL Intrusion Shipyard A shipyard is victim of an intrusion.
29/01/2022 DE Virus/Ransomware Industry A company working in the oil and gas sector is hit by a ransomware attack.
28/01/2022 FR Intrusion Shipowner A transportation company is victim of intrusion attempts.
28/01/2022 BE Virus/Ransomware Industry A company working in the oil and gas sector is hit by a ransomware attack.
15/01/2022 KP Denial of Service Administration A maritime administration is targeted by a denial of service attack.
14/01/2022 UA Intrusion Administration The website of a maritime administration is hit by a cyber attack.
11/01/2022 IT Virus/Ransomware Logistics A logistics company working - amongst others - in the maritime domain is hit by a cyber attack.
07/01/2022 US Virus/Ransomware Port A port authority is hit by a ransomware attack.
06/01/2022 IT Virus/Ransomware Fishing A company working in the fishing sector is hit by a ransomware attack.

Most impacted maritime activities - Year 2022

  • Logistics: 18 disclosed maritime cybersecurity incidents (20.7%)
  • Port: 16 disclosed maritime cybersecurity incidents (18.4%)
  • Industry: 14 disclosed maritime cybersecurity incidents (16.1%)
  • Shipowner: 13 disclosed maritime cybersecurity incidents (14.9%)
  • Shipyard: 4 disclosed maritime cybersecurity incidents (4.6%)
  • Fishing: 3 disclosed maritime cybersecurity incidents (3.4%)
  • Administration: 3 disclosed maritime cybersecurity incidents (3.4%)
  • MRE: 3 disclosed maritime cybersecurity incidents (3.4%)
  • Organisation: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Education: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Ship: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Offshore: 1 disclosed maritime cybersecurity incident (1.1%)
  • Defence: 1 disclosed maritime cybersecurity incident (1.1%)
  • Manufacturer: 1 disclosed maritime cybersecurity incident (1.1%)
  • Fluvial: 1 disclosed maritime cybersecurity incident (1.1%)
  • Insurer: 1 disclosed maritime cybersecurity incident (1.1%)
  • Undersea cable: 1 disclosed maritime cybersecurity incident (1.1%)
  • IT Services: 1 disclosed maritime cybersecurity incident (1.1%)

Most impacted countries - Year 2022

  • United States: 18 disclosed maritime cybersecurity incidents (20.7%)
  • United Kingdom: 7 disclosed maritime cybersecurity incidents (8.0%)
  • France: 6 disclosed maritime cybersecurity incidents (6.9%)
  • Germany: 6 disclosed maritime cybersecurity incidents (6.9%)
  • Italy: 4 disclosed maritime cybersecurity incidents (4.6%)
  • Singapore: 4 disclosed maritime cybersecurity incidents (4.6%)
  • Indonesia: 3 disclosed maritime cybersecurity incidents (3.4%)
  • Japan: 3 disclosed maritime cybersecurity incidents (3.4%)
  • Israel: 3 disclosed maritime cybersecurity incidents (3.4%)
  • Greece: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Turkey: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Viet Nam: 2 disclosed maritime cybersecurity incidents (2.3%)
  • India: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Ukraine: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Taiwan, Province of China: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Philippines: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Bulgaria: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Cyprus: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Lithuania: 1 disclosed maritime cybersecurity incident (1.1%)
  • Korea, Democratic People's Republic of: 1 disclosed maritime cybersecurity incident (1.1%)
  • Belgium: 1 disclosed maritime cybersecurity incident (1.1%)
  • Korea, Republic of: 1 disclosed maritime cybersecurity incident (1.1%)
  • Lebanon: 1 disclosed maritime cybersecurity incident (1.1%)
  • Oman: 1 disclosed maritime cybersecurity incident (1.1%)
  • Iraq: 1 disclosed maritime cybersecurity incident (1.1%)
  • Peru: 1 disclosed maritime cybersecurity incident (1.1%)
  • Australia: 1 disclosed maritime cybersecurity incident (1.1%)
  • Netherlands: 1 disclosed maritime cybersecurity incident (1.1%)
  • China: 1 disclosed maritime cybersecurity incident (1.1%)
  • Panama: 1 disclosed maritime cybersecurity incident (1.1%)
  • Finland: 1 disclosed maritime cybersecurity incident (1.1%)
  • Saudi Arabia: 1 disclosed maritime cybersecurity incident (1.1%)
  • Portugal: 1 disclosed maritime cybersecurity incident (1.1%)

Incident types - Year 2022

  • Virus/Ransomware: 55 disclosed maritime cybersecurity incidents (63.2%)
  • Data leak: 9 disclosed maritime cybersecurity incidents (10.3%)
  • Intrusion: 7 disclosed maritime cybersecurity incidents (8.0%)
  • Denial of Service: 5 disclosed maritime cybersecurity incidents (5.7%)
  • Phishing: 4 disclosed maritime cybersecurity incidents (4.6%)
  • Spearphishing: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Undisclosed: 2 disclosed maritime cybersecurity incidents (2.3%)
  • GPS/AIS jamming/spoofing: 1 disclosed maritime cybersecurity incident (1.1%)
  • Scam: 1 disclosed maritime cybersecurity incident (1.1%)
  • Website Compromission: 1 disclosed maritime cybersecurity incident (1.1%)

Claimed or Reported Threat Actor - Year 2022

  • Conti: 5 disclosed maritime cybersecurity incidents (5.7%)
  • Lockbit 2.0: 5 disclosed maritime cybersecurity incidents (5.7%)
  • Hive: 3 disclosed maritime cybersecurity incidents (3.4%)
  • Lockbit 3.0: 3 disclosed maritime cybersecurity incidents (3.4%)
  • Black Basta: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Killnet: 2 disclosed maritime cybersecurity incidents (2.3%)
  • Goldeneye: 1 disclosed maritime cybersecurity incident (1.1%)
  • Iran: 1 disclosed maritime cybersecurity incident (1.1%)
  • Onyx: 1 disclosed maritime cybersecurity incident (1.1%)
  • Altahrea Team: 1 disclosed maritime cybersecurity incident (1.1%)
  • Snatch: 1 disclosed maritime cybersecurity incident (1.1%)
  • BlackByte: 1 disclosed maritime cybersecurity incident (1.1%)
  • Bianlian: 1 disclosed maritime cybersecurity incident (1.1%)

Evolution - Year 2022

Files generated on Monday, 11th December 2023.
ADMIRAL is licensed under the Creative Commons CC-BY-NC license. Copyright © France Cyber Maritime 2023.