Maritime Computer Emergency Response Team (M-CERT)

Most impacted countries - European Union

France - 38 disclosed maritime cybersecurity incidents (23.9%)

Germany - 26 disclosed maritime cybersecurity incidents (16.4%)

Netherlands - 17 disclosed maritime cybersecurity incidents (10.7%)

Italy - 13 disclosed maritime cybersecurity incidents (8.2%)

Sweden - 10 disclosed maritime cybersecurity incidents (6.3%)

Lithuania - 9 disclosed maritime cybersecurity incidents (5.7%)

Denmark - 8 disclosed maritime cybersecurity incidents (5.0%)

Greece - 6 disclosed maritime cybersecurity incidents (3.8%)

Croatia - 5 disclosed maritime cybersecurity incidents (3.1%)

Finland - 5 disclosed maritime cybersecurity incidents (3.1%)

Spain - 5 disclosed maritime cybersecurity incidents (3.1%)

Bulgaria - 4 disclosed maritime cybersecurity incidents (2.5%)

Cyprus - 4 disclosed maritime cybersecurity incidents (2.5%)

Belgium - 3 disclosed maritime cybersecurity incidents (1.9%)

Poland - 3 disclosed maritime cybersecurity incidents (1.9%)

Malta - 1 disclosed maritime cybersecurity incident (0.6%)

Portugal - 1 disclosed maritime cybersecurity incident (0.6%)

Estonia - 1 disclosed maritime cybersecurity incident (0.6%)

Most impacted maritime activities - European Union

Port - 48 disclosed maritime cybersecurity incidents (30.2%)

Logistics - 19 disclosed maritime cybersecurity incidents (11.9%)

Shipowner - 17 disclosed maritime cybersecurity incidents (10.7%)

Industry - 14 disclosed maritime cybersecurity incidents (8.8%)

Defence - 12 disclosed maritime cybersecurity incidents (7.5%)

Ship - 8 disclosed maritime cybersecurity incidents (5.0%)

Shipyard - 8 disclosed maritime cybersecurity incidents (5.0%)

Transport - 8 disclosed maritime cybersecurity incidents (5.0%)

Administration - 6 disclosed maritime cybersecurity incidents (3.8%)

Mre - 5 disclosed maritime cybersecurity incidents (3.1%)

Organisation - 5 disclosed maritime cybersecurity incidents (3.1%)

It services - 3 disclosed maritime cybersecurity incidents (1.9%)

Offshore - 2 disclosed maritime cybersecurity incidents (1.3%)

Manufacturer - 1 disclosed maritime cybersecurity incident (0.6%)

Classification company - 1 disclosed maritime cybersecurity incident (0.6%)

Insurer - 1 disclosed maritime cybersecurity incident (0.6%)

Fishing - 1 disclosed maritime cybersecurity incident (0.6%)

Most common incident types - European Union

Virus/ransomware - 67 disclosed maritime cybersecurity incidents (42.1%)

Denial of service - 60 disclosed maritime cybersecurity incidents (37.7%)

Intrusion - 11 disclosed maritime cybersecurity incidents (6.9%)

Data leak - 6 disclosed maritime cybersecurity incidents (3.8%)

Gps/ais jamming/spoofing - 4 disclosed maritime cybersecurity incidents (2.5%)

Malfunction - 2 disclosed maritime cybersecurity incidents (1.3%)

Spearphishing - 2 disclosed maritime cybersecurity incidents (1.3%)

Scam - 2 disclosed maritime cybersecurity incidents (1.3%)

Physical hijack - 1 disclosed maritime cybersecurity incident (0.6%)

Website compromission - 1 disclosed maritime cybersecurity incident (0.6%)

Phishing - 1 disclosed maritime cybersecurity incident (0.6%)

Undisclosed - 1 disclosed maritime cybersecurity incident (0.6%)

Human error - 1 disclosed maritime cybersecurity incident (0.6%)

Most claimed/reported threat actors having targeted European Union

Noname057(16) - 44 disclosed maritime cybersecurity incidents (27.7%)
Lockbit 3.0 - 5 disclosed maritime cybersecurity incidents (3.1%)
Snatch - 3 disclosed maritime cybersecurity incidents (1.9%)
Conti - 3 disclosed maritime cybersecurity incidents (1.9%)
Cl0p - 3 disclosed maritime cybersecurity incidents (1.9%)
Anchor panda - 2 disclosed maritime cybersecurity incidents (1.3%)
Notpetya - 2 disclosed maritime cybersecurity incidents (1.3%)
Darkstorm team - 2 disclosed maritime cybersecurity incidents (1.3%)
Net-worker alliance - 2 disclosed maritime cybersecurity incidents (1.3%)
Black basta - 2 disclosed maritime cybersecurity incidents (1.3%)
Killnet - 2 disclosed maritime cybersecurity incidents (1.3%)
Anonymous sudan - 1 disclosed maritime cybersecurity incident (0.6%)
Alphv - 1 disclosed maritime cybersecurity incident (0.6%)
Darkrace - 1 disclosed maritime cybersecurity incident (0.6%)
Blackcat - 1 disclosed maritime cybersecurity incident (0.6%)
Stormous - 1 disclosed maritime cybersecurity incident (0.6%)
Conficker - 1 disclosed maritime cybersecurity incident (0.6%)
Play - 1 disclosed maritime cybersecurity incident (0.6%)
Hive - 1 disclosed maritime cybersecurity incident (0.6%)
China - 1 disclosed maritime cybersecurity incident (0.6%)
Lockbit 2.0 - 1 disclosed maritime cybersecurity incident (0.6%)
Ragnar locker - 1 disclosed maritime cybersecurity incident (0.6%)
Egregor - 1 disclosed maritime cybersecurity incident (0.6%)
Mespinoza/pysa - 1 disclosed maritime cybersecurity incident (0.6%)
Ryuk - 1 disclosed maritime cybersecurity incident (0.6%)
Us dod hacker - 1 disclosed maritime cybersecurity incident (0.6%)

Maritime cybersecurity in European Union - Disclosed incidents

Most impacted countries - European Union

Most impacted maritime activities - European Union

Most common incident types - European Union

Most claimed/reported threat actors having targeted European Union