[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-maersk-confirms-breach-of-legacy-system-hackers-want-5m":10,"sections":40},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":35,"feedback":39,"feedback_at":22,"cost_usd":39,"total_tokens":39},12937,"maersk-confirms-breach-of-legacy-system-hackers-want-5m","Maersk Confirms Breach of Legacy System, Hackers Want $5M","Maersk says a legacy system at an acquired firm was breached; ransomware group WhiteArmor claims 100GB and wants $5 million.","Maersk says attackers broke into a legacy system belonging to a company it previously acquired, and a ransomware group is demanding $5 million to keep the stolen data off the internet.\n\nIn its incident report, Maersk did not name the acquired company. It said the incident is isolated to a local system, with no sign of impact on other Maersk systems or on customer and partner systems connected through integrations such as APIs and EDI (the standard data-exchange format used in logistics). \"Our findings so far strongly suggest no sensitive data has been disclosed,\" the company said. Customers can keep booking and managing shipments as usual.\n\nThe named target comes from the attackers. A group calling itself WhiteArmor listed Maersk on its leak site and said the victim is the former LF Logistics, a Hong Kong-based logistics firm Maersk bought in 2022 for $3.6 billion. Maersk has not confirmed that link. WhiteArmor gave a 30-day deadline for payment in bitcoin.\n\nThe group also claims to hold 100GB, including almost 30,000 driver records, plaintext passwords, 33 SUPER_ADMIN accounts, signed delivery receipts and 27,842 mobile device logs with phone numbers, emails and IMEI numbers. None of that is verified, and Maersk said it is still assessing the claims.\n\nIf the claims hold, the exposed credentials would force a broad password reset, and the contact details would suit phishing. A $5 million demand is small next to a company with more than $50 billion in revenue, which suggests the group is betting on embarrassment as much as payment.\n\nThe contrast with 2017 is sharp. NotPetya froze Maersk's global network and cost it between $250 million and $300 million. This time the company describes a contained, local problem. Whether the leaked data matches that description is the open question.","[\"maersk\",\"ransomware\",\"data-breach\"]","2026-11-12T14:20:00.000Z","2026-11-12T15:14:40.270Z","2026-11-12T15:14:40.694Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"editor-r1","editor",1,"Maersk's incident report did not name the acquired company, and the LF Logistics link comes from WhiteArmor's leak-site post as relayed by BleepingComputer and TechRadar, yet the headline, dek and body state it as confirmed fact, so attribute it and make clear Maersk has not confirmed it; also cut or support the unsourced claims that the system was 'brought along' in the deal and 'still reachable years later', since no breach date or system history is given.","resolved","security",[32,33,34],"maersk","ransomware","data-breach",[36],{"name":37,"url":38},"TechRadar","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fsecurity\u002Fshipping-giant-maersk-confirms-data-breach-as-hackers-demand-usd5-million-ransom",0,{"sections":41},[42,47,51,56,61,66,71,76,81,86,91,96,101,106],{"name":43,"slug":44,"count":45,"latest_published_at":46},"AI","ai",7151,"2026-11-13T11:05:00.000Z",{"name":48,"slug":30,"count":49,"latest_published_at":50},"Security",1132,"2026-11-12T15:35:00.000Z",{"name":52,"slug":53,"count":54,"latest_published_at":55},"Deals","deals",653,"2026-11-13T11:52:26.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Policy","policy",621,"2026-11-12T19:54:30.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Consumer Tech","consumer-tech",370,"2026-11-12T17:00:00.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Hardware","hardware",337,"2026-11-12T15:31:12.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":75},"Science","science",232,"2026-11-13T12:00:40.000Z",{"name":77,"slug":78,"count":79,"latest_published_at":80},"Software","software",172,"2026-11-13T11:04:24.000Z",{"name":82,"slug":83,"count":84,"latest_published_at":85},"Startups","startups",160,"2026-11-12T17:31:47.000Z",{"name":87,"slug":88,"count":89,"latest_published_at":90},"Dev Tools","dev-tools",127,"2026-11-11T19:00:44.000Z",{"name":92,"slug":93,"count":94,"latest_published_at":95},"General","general",120,"2026-11-13T11:33:19.000Z",{"name":97,"slug":98,"count":99,"latest_published_at":100},"Gaming","gaming",109,"2026-11-13T10:00:00.000Z",{"name":102,"slug":103,"count":104,"latest_published_at":105},"Reviews","reviews",38,"2026-10-20T12:00:00.000Z",{"name":107,"slug":108,"count":109,"latest_published_at":110},"How-To","how-to",8,"2026-10-05T09:00:00.000Z"]