Maritime Computer Emergency Response Team (M-CERT)

Most impacted countries - European Union

France - 34 disclosed maritime cybersecurity incidents (25.2%)

Germany - 24 disclosed maritime cybersecurity incidents (17.8%)

Netherlands - 14 disclosed maritime cybersecurity incidents (10.4%)

Italy - 11 disclosed maritime cybersecurity incidents (8.1%)

Sweden - 9 disclosed maritime cybersecurity incidents (6.7%)

Lithuania - 8 disclosed maritime cybersecurity incidents (5.9%)

Greece - 6 disclosed maritime cybersecurity incidents (4.4%)

Denmark - 6 disclosed maritime cybersecurity incidents (4.4%)

Spain - 5 disclosed maritime cybersecurity incidents (3.7%)

Cyprus - 4 disclosed maritime cybersecurity incidents (3.0%)

Finland - 3 disclosed maritime cybersecurity incidents (2.2%)

Belgium - 3 disclosed maritime cybersecurity incidents (2.2%)

Bulgaria - 3 disclosed maritime cybersecurity incidents (2.2%)

Poland - 3 disclosed maritime cybersecurity incidents (2.2%)

Malta - 1 disclosed maritime cybersecurity incident (0.7%)

Portugal - 1 disclosed maritime cybersecurity incident (0.7%)

Most impacted maritime activities - European Union

Port - 35 disclosed maritime cybersecurity incidents (25.9%)

Shipowner - 18 disclosed maritime cybersecurity incidents (13.3%)

Logistics - 18 disclosed maritime cybersecurity incidents (13.3%)

Industry - 14 disclosed maritime cybersecurity incidents (10.4%)

Defence - 10 disclosed maritime cybersecurity incidents (7.4%)

Ship - 8 disclosed maritime cybersecurity incidents (5.9%)

Shipyard - 8 disclosed maritime cybersecurity incidents (5.9%)

Organisation - 5 disclosed maritime cybersecurity incidents (3.7%)

Mre - 5 disclosed maritime cybersecurity incidents (3.7%)

Administration - 3 disclosed maritime cybersecurity incidents (2.2%)

It services - 3 disclosed maritime cybersecurity incidents (2.2%)

Offshore - 2 disclosed maritime cybersecurity incidents (1.5%)

Transport - 2 disclosed maritime cybersecurity incidents (1.5%)

Insurer - 1 disclosed maritime cybersecurity incident (0.7%)

Fishing - 1 disclosed maritime cybersecurity incident (0.7%)

Classification company - 1 disclosed maritime cybersecurity incident (0.7%)

Manufacturer - 1 disclosed maritime cybersecurity incident (0.7%)

Most common incident types - European Union

Virus/ransomware - 64 disclosed maritime cybersecurity incidents (47.4%)

Denial of service - 40 disclosed maritime cybersecurity incidents (29.6%)

Intrusion - 10 disclosed maritime cybersecurity incidents (7.4%)

Data leak - 6 disclosed maritime cybersecurity incidents (4.4%)

Gps/ais jamming/spoofing - 4 disclosed maritime cybersecurity incidents (3.0%)

Malfunction - 2 disclosed maritime cybersecurity incidents (1.5%)

Spearphishing - 2 disclosed maritime cybersecurity incidents (1.5%)

Scam - 2 disclosed maritime cybersecurity incidents (1.5%)

Physical hijack - 1 disclosed maritime cybersecurity incident (0.7%)

Website compromission - 1 disclosed maritime cybersecurity incident (0.7%)

Phishing - 1 disclosed maritime cybersecurity incident (0.7%)

Undisclosed - 1 disclosed maritime cybersecurity incident (0.7%)

Human error - 1 disclosed maritime cybersecurity incident (0.7%)

Most claimed/reported threat actors having targeted European Union

Noname057(16) - 20 disclosed maritime cybersecurity incidents (14.8%)
Cl0p - 3 disclosed maritime cybersecurity incidents (2.2%)
Conti - 3 disclosed maritime cybersecurity incidents (2.2%)
Lockbit 3.0 - 3 disclosed maritime cybersecurity incidents (2.2%)
Anchor panda - 2 disclosed maritime cybersecurity incidents (1.5%)
Notpetya - 2 disclosed maritime cybersecurity incidents (1.5%)
Net-worker alliance - 2 disclosed maritime cybersecurity incidents (1.5%)
Black basta - 2 disclosed maritime cybersecurity incidents (1.5%)
Snatch - 2 disclosed maritime cybersecurity incidents (1.5%)
Conficker - 1 disclosed maritime cybersecurity incident (0.7%)
Stormous - 1 disclosed maritime cybersecurity incident (0.7%)
Anonymous sudan - 1 disclosed maritime cybersecurity incident (0.7%)
Play - 1 disclosed maritime cybersecurity incident (0.7%)
Lockbit 2.0 - 1 disclosed maritime cybersecurity incident (0.7%)
Hive - 1 disclosed maritime cybersecurity incident (0.7%)
China - 1 disclosed maritime cybersecurity incident (0.7%)
Killnet - 1 disclosed maritime cybersecurity incident (0.7%)
Ragnar locker - 1 disclosed maritime cybersecurity incident (0.7%)
Egregor - 1 disclosed maritime cybersecurity incident (0.7%)
Ryuk - 1 disclosed maritime cybersecurity incident (0.7%)
Lockbit - 1 disclosed maritime cybersecurity incident (0.7%)

Maritime cybersecurity in European Union - Disclosed incidents

Most impacted countries - European Union

Most impacted maritime activities - European Union

Most common incident types - European Union

Most claimed/reported threat actors having targeted European Union