CYBERSECURITYTRACKER
Permanent story citation

Risky Bulletin: Supply chain attack lets ransomware group inside 40+ shipping companies

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11143

As cited

Copy frozen at (site build).

ransomware

Risky Bulletin: Supply chain attack lets ransomware group inside 40+ shipping companies

The n0n ransomware group conducted a supply chain attack through a maritime information technology services provider, gaining access to over 40 port authorities and shipping companies. Half of the affected organizations were identified as customers of CyberLogitec, a South Korean maritime software provider. Victims were listed on n0n's leak site on October 12, 2026, with extortion deadlines expiring October 19, 2026.

Why it matters: Port authorities, shipping companies, and maritime operators worldwide now face potential data exposure and operational disruption; practitioners managing or defending maritime supply chains should inventory their dependencies on shared IT platforms and check for indicators of compromise from this attack.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary