38 Maritime Firms Hit by Cyber Extortion Group: Data Leak Threat

Cybercrime group n0n has identified 38 shipping lines, container terminals, and port operators across 18 countries as targets in a coordinated data extortion campaign launched on October 12. The attack appears to exploit a common vulnerability in shared systems rather than targeting each organization independently, suggesting exposure may extend far beyond the named companies. Ransom demands range from $2.4 million to $14 million with a publication deadline of October 19, creating immediate pressure on affected maritime businesses and their supply chain partners.

Security researchers at SOCRadar indicate the threat pattern mirrors previous mass-exploitation campaigns affecting file-transfer and integration platforms. Stolen data includes electronic data interchange messages, container manifests, vessel schedules, and terminal configurations, potentially exposing cargo movements, booking information, and commercial relationships across the broader supply chain. The relatively consistent dataset characteristics across victims suggest centralized access through a shared application rather than individual network breaches.

For supply chain professionals, this incident represents a structural risk to maritime operations: even if a company isn't directly named, its operational data may be exposed through partner systems or shared platforms. Organizations must immediately audit their integration infrastructure, verify breach status with third-party providers, and prepare contingency communications for potential data exposure.