Maersk confirms data breach as WhiteArmor ransomware demands $5 million

# Maersk confirms data breach as WhiteArmor ransomware demands $5 million

https://gcdradar.vercel.app/incidents/maersk-confirms-data-breach-as-whitearmor-ransomware-demands · AIR-2026-1904 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed real-world intrusion and extortion demand against a named organisation.
- Fix status: No fix needed
- First reported: 2026-11-11
- AI role: No AI role
- Products: WhiteArmor ransomware

## Summary

Maersk confirmed that attackers gained unauthorized access to an acquired legacy system and extracted internal data. The WhiteArmor ransomware group subsequently issued a $5 million extortion demand.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-11: Maersk confirms data breach as WhiteArmor ransomware demands $5 million (https://bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million)

## Sources

- 2026-11-11 BleepingComputer: Maersk confirms data breach as WhiteArmor ransomware demands $5 million https://bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million
- 2026-11-12 SecurityWeek: Maersk Confirms Data Theft Amid $5 Million Extortion Attempt https://securityweek.com/maersk-confirms-data-theft-amid-5-million-extortion-attempt
- 2026-11-12 The Record: Shipping giant Maersk says recent cyber incident affected legacy system https://therecord.media/shipping-giant-maersk-says-recent-incident-affected-legacy-system

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.