Extortion group threatens data release from 38 maritime organizations

An extortion group called n0n listed 38 maritime organizations on October 12 and threatened to publish their data unless they pay by October 19, The Maritime Executive reported. Security firm SOCRadar put the demands between $2.4 million and $14 million. The named organizations include shipping lines, ports, terminal operators and crane manufacturer ZPMC. SOCRadar believes the alleged exposure likely originated in one shared system and involves shipping messages, manifests, equipment records and terminal configuration material. Maritime cybersecurity firm Cydome identified a possible compromise of a shared environment associated with software provider CLT. None of the listed organizations has publicly confirmed the attack, and Cydome said its source and scope remain unconfirmed.