INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Shipping firms and ports hit by mass cyber extortion

| 2026-10-14 12:09 MEDIUM LOW RANSOMWARE & EXTORTION DATA BREACH CRITICAL INFRASTRUCTURE & OT
JSON
Executive Summary
AI-generated
A cyber extortion group, known as n0n , has threatened to publish data it claims stole from 38 shipping, port, and logistics companies unless they pay multimillion-dollar ransoms by October 19. The list of targeted organisations includes Ocean Network Express, CULines, TS Lines, Pusan Newport Company, NEOM Ports, among others, with a total of 12 terminal operators, 10 shipping lines, and 38 maritime businesses across 18 countries. The group added the 38 organisations to its dark web leak site in a single batch on October 12, marking a sharp shift towards maritime targets. Cybersecurity firm SOCRadar has verified that none of the listed companies have publicly confirmed their systems were compromised or possessed by n0n , leaving the claims unverified until further notice.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
Target & Sectors
Global Scope logisticslogistics maritimemaritime
Incident Timeline
‎October 12
Threat actors, identified as the group n0n, added 38 shipping firms and ports to its dark web leak site in a single batch on October 12.
general_metric 38 organisations
Cybersecurity firm SOCRadar said the group, known as n0n , added the 38 organisations to its dark web leak site in a single batch on October 12, marking a sharp shift towards maritime targets.
‎2026/10/14
General Document Context The list includes 12 port and container terminal operators, 10 shipping lines and ship operators, port IT providers, logistics companies, and other maritime businesses across 18 countries.
organisation Ocean Network Express
The list includes Ocean Network Express, CULines, TS Lines, and Samudera, as well as terminal operators Santos Brasil, Portonave, BNCT, Pusan Newport Company, TTI Algeciras, Eurogate Tanger, Nam Dinh Vu Port, and NEOM Ports.
organisation CULines
The list includes Ocean Network Express, CULines, TS Lines, and Samudera, as well as terminal operators Santos Brasil, Portonave, BNCT, Pusan Newport Company, TTI Algeciras, Eurogate Tanger, Nam Dinh Vu Port, and NEOM Ports.
organisation TS Lines
The list includes Ocean Network Express, CULines, TS Lines, and Samudera, as well as terminal operators Santos Brasil, Portonave, BNCT, Pusan Newport Company, TTI Algeciras, Eurogate Tanger, Nam Dinh Vu Port, and NEOM Ports.
organisation Pusan Newport Company
The list includes Ocean Network Express, CULines, TS Lines, and Samudera, as well as terminal operators Santos Brasil, Portonave, BNCT, Pusan Newport Company, TTI Algeciras, Eurogate Tanger, Nam Dinh Vu Port, and NEOM Ports.
organisation NEOM Ports
The list includes Ocean Network Express, CULines, TS Lines, and Samudera, as well as terminal operators Santos Brasil, Portonave, BNCT, Pusan Newport Company, TTI Algeciras, Eurogate Tanger, Nam Dinh Vu Port, and NEOM Ports.
infrastructure 10 shipping lines
The list includes 12 port and container terminal operators, 10 shipping lines and ship operators, port IT providers, logistics companies, and other maritime businesses across 18 countries.
‎October 19
A cyber extortion group claims to have stolen data from 38 shipping, port, and logistics companies and is threatening to publish it unless they pay multimillion-dollar ransoms by October 19.
tactic Extortion
Bojan Lepic reports: A cyber extortion group has threatened to publish data it claims it stole from 38 shipping, port, and logistics companies unless they pay multimillion-dollar ransoms by October 19.
infrastructure 38 shipping
Bojan Lepic reports: A cyber extortion group has threatened to publish data it claims it stole from 38 shipping, port, and logistics companies unless they pay multimillion-dollar ransoms by October 19.
Tactical Metrics
Metrics
infrastructure
38
Shipping
Bojan Lepic reports: A cyber extortion group has threatened to publish data it claims it stole from 38 shipping, port, and logistics companies unless they pay multimillion-dollar ransoms by October 19.
Metrics
infrastructure
10
Shipping Lines
The list includes 12 port and container terminal operators, 10 shipping lines and ship operators, port IT providers, logistics companies, and other maritime businesses across 18 countries.
Intelligence Sources
Data Breaches 2026-10-14