Maritime Computer Emergency Response Team ADMIRAL dataset ADMIRAL dataset

Maritime cybersecurity in NATO - Disclosed incidents

310 maritime cybersecurity incidents disclosed for NATO

Most impacted countries - NATO

  • United states - 99 disclosed maritime cybersecurity incidents (31.9%)
  • France - 39 disclosed maritime cybersecurity incidents (12.6%)
  • Germany - 27 disclosed maritime cybersecurity incidents (8.7%)
  • Canada - 22 disclosed maritime cybersecurity incidents (7.1%)
  • United kingdom - 22 disclosed maritime cybersecurity incidents (7.1%)
  • Netherlands - 17 disclosed maritime cybersecurity incidents (5.5%)
  • Norway - 15 disclosed maritime cybersecurity incidents (4.8%)
  • Italy - 13 disclosed maritime cybersecurity incidents (4.2%)
  • Lithuania - 9 disclosed maritime cybersecurity incidents (2.9%)
  • Denmark - 8 disclosed maritime cybersecurity incidents (2.6%)
  • Spain - 6 disclosed maritime cybersecurity incidents (1.9%)
  • Greece - 6 disclosed maritime cybersecurity incidents (1.9%)
  • Finland - 5 disclosed maritime cybersecurity incidents (1.6%)
  • Bulgaria - 5 disclosed maritime cybersecurity incidents (1.6%)
  • Croatia - 5 disclosed maritime cybersecurity incidents (1.6%)
  • Turkey - 4 disclosed maritime cybersecurity incidents (1.3%)
  • Belgium - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Poland - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Portugal - 1 disclosed maritime cybersecurity incident (0.3%)
  • Estonia - 1 disclosed maritime cybersecurity incident (0.3%)

Most impacted maritime activities - NATO

  • Port - 75 disclosed maritime cybersecurity incidents (24.2%)
  • Logistics - 39 disclosed maritime cybersecurity incidents (12.6%)
  • Defence - 37 disclosed maritime cybersecurity incidents (11.9%)
  • Shipowner - 33 disclosed maritime cybersecurity incidents (10.6%)
  • Industry - 30 disclosed maritime cybersecurity incidents (9.7%)
  • Offshore - 18 disclosed maritime cybersecurity incidents (5.8%)
  • Ship - 13 disclosed maritime cybersecurity incidents (4.2%)
  • Transport - 12 disclosed maritime cybersecurity incidents (3.9%)
  • Shipyard - 10 disclosed maritime cybersecurity incidents (3.2%)
  • Administration - 9 disclosed maritime cybersecurity incidents (2.9%)
  • Organisation - 7 disclosed maritime cybersecurity incidents (2.3%)
  • Mre - 6 disclosed maritime cybersecurity incidents (1.9%)
  • It services - 4 disclosed maritime cybersecurity incidents (1.3%)
  • Classification company - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Fishing - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Leasure - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Manufacturer - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Fluvial - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Insurer - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Education - 1 disclosed maritime cybersecurity incident (0.3%)
  • Undersea cable - 1 disclosed maritime cybersecurity incident (0.3%)

Most common incident types - NATO

  • Virus/ransomware - 145 disclosed maritime cybersecurity incidents (46.8%)
  • Denial of service - 82 disclosed maritime cybersecurity incidents (26.5%)
  • Intrusion - 35 disclosed maritime cybersecurity incidents (11.3%)
  • Data leak - 12 disclosed maritime cybersecurity incidents (3.9%)
  • Spearphishing - 9 disclosed maritime cybersecurity incidents (2.9%)
  • Gps/ais jamming/spoofing - 6 disclosed maritime cybersecurity incidents (1.9%)
  • Scam - 6 disclosed maritime cybersecurity incidents (1.9%)
  • Undisclosed - 5 disclosed maritime cybersecurity incidents (1.6%)
  • Website compromission - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Human error - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Physical hijack - 1 disclosed maritime cybersecurity incident (0.3%)
  • Malfunction - 1 disclosed maritime cybersecurity incident (0.3%)
  • Remote access - 1 disclosed maritime cybersecurity incident (0.3%)
  • Phishing - 1 disclosed maritime cybersecurity incident (0.3%)
  • Legitimate access - 1 disclosed maritime cybersecurity incident (0.3%)

Most claimed/reported threat actors having targeted NATO

  • Noname057(16) - 56 disclosed maritime cybersecurity incidents (18.1%)
  • Lockbit 3.0 - 7 disclosed maritime cybersecurity incidents (2.3%)
  • Undisclosed - 5 disclosed maritime cybersecurity incidents (1.6%)
  • Conti - 5 disclosed maritime cybersecurity incidents (1.6%)
  • China - 4 disclosed maritime cybersecurity incidents (1.3%)
  • Cl0p - 4 disclosed maritime cybersecurity incidents (1.3%)
  • Revil - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Anchor panda - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Killnet - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Maze - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Black basta - 3 disclosed maritime cybersecurity incidents (1.0%)
  • Egregor - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Hive - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Alphv - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Lockbit 2.0 - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Darkstorm_team - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Net-worker alliance - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Snatch - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Ryuk - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Notpetya - 2 disclosed maritime cybersecurity incidents (0.6%)
  • 8base - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Bianlian - 2 disclosed maritime cybersecurity incidents (0.6%)
  • Noescape - 1 disclosed maritime cybersecurity incident (0.3%)
  • Play - 1 disclosed maritime cybersecurity incident (0.3%)
  • Snatch - 1 disclosed maritime cybersecurity incident (0.3%)
  • Abyss - 1 disclosed maritime cybersecurity incident (0.3%)
  • Cyber_army_russia - 1 disclosed maritime cybersecurity incident (0.3%)
  • Akira - 1 disclosed maritime cybersecurity incident (0.3%)
  • Hunters - 1 disclosed maritime cybersecurity incident (0.3%)
  • Money message - 1 disclosed maritime cybersecurity incident (0.3%)
  • Cactus - 1 disclosed maritime cybersecurity incident (0.3%)
  • Donut - 1 disclosed maritime cybersecurity incident (0.3%)
  • Usdod-hacker - 1 disclosed maritime cybersecurity incident (0.3%)
  • Rhysida - 1 disclosed maritime cybersecurity incident (0.3%)
  • Hunters_killers - 1 disclosed maritime cybersecurity incident (0.3%)
  • Bianlian - 1 disclosed maritime cybersecurity incident (0.3%)
  • Dynamic duo - 1 disclosed maritime cybersecurity incident (0.3%)
  • Darkrace - 1 disclosed maritime cybersecurity incident (0.3%)
  • Mespinoza/pysa - 1 disclosed maritime cybersecurity incident (0.3%)
  • Conficker - 1 disclosed maritime cybersecurity incident (0.3%)
  • Sl1nk - 1 disclosed maritime cybersecurity incident (0.3%)
  • The elderwood gang - 1 disclosed maritime cybersecurity incident (0.3%)
  • Iran - 1 disclosed maritime cybersecurity incident (0.3%)
  • Icefog - 1 disclosed maritime cybersecurity incident (0.3%)
  • Russia - 1 disclosed maritime cybersecurity incident (0.3%)
  • Samsam - 1 disclosed maritime cybersecurity incident (0.3%)
  • Ragnar locker - 1 disclosed maritime cybersecurity incident (0.3%)
  • Akira - 1 disclosed maritime cybersecurity incident (0.3%)
  • Onyx - 1 disclosed maritime cybersecurity incident (0.3%)
  • Altahrea team - 1 disclosed maritime cybersecurity incident (0.3%)
  • Dkd - 1 disclosed maritime cybersecurity incident (0.3%)
  • Play - 1 disclosed maritime cybersecurity incident (0.3%)
  • Anonymous sudan - 1 disclosed maritime cybersecurity incident (0.3%)
  • Stormous - 1 disclosed maritime cybersecurity incident (0.3%)
  • Blackcat - 1 disclosed maritime cybersecurity incident (0.3%)
  • Ransomhub - 1 disclosed maritime cybersecurity incident (0.3%)
Files generated on Thursday, 10th October 2024.
ADMIRAL is licensed under the Creative Commons CC-BY-NC license. Copyright © France Cyber Maritime 2024.