Cyber Extortion Group Threatens 38 Maritime Organisations

The cyber extortion group n0n has threatened to publish data it claims to have stolen from 38 port, shipping and logistics organisations operating in 18 countries. The group is demanding ransoms ranging from $2.4 million to $14 million, setting October 19 as the deadline for payment.

The list, published on a dark web leak site on October 12, includes port and container terminal operators, shipping companies and logistics businesses. However, the alleged data breaches have not been independently verified.

Vessel Schedules and Container Records Among Targeted Data

The data the group claims to possess includes container manifests, vessel schedules, port gate movement records, commercial documents, employee accounts and financial records. Payments are being demanded in Bitcoin, while some organisations have reportedly been asked to pay 10% of the demanded amount upfront to gain access to private negotiation rooms.

Possible Shared Security Vulnerability

Similarities between the datasets allegedly taken from different organisations have raised the possibility that the incidents may be linked to a shared application or security vulnerability. However, it remains unclear whether the organisations were compromised individually or through a common system.

The group has threatened to publish the alleged data at 13:27 UTC on October 19.