Maersk Confirms Data Was Taken From an Acquired Legacy System as Its Investigation Continues

Maersk has confirmed that an intruder accessed a local legacy system inherited through an acquisition and extracted data. The shipping group disclosed the incident on November 11, saying its investigation remains open.

The company says it secured the affected system after discovering the intrusion. Its assessment so far points to a contained incident, with no indication of impact on other Maersk systems or the customer and partner systems connected to them.

Data taken, scope still being established

Maersk says its findings strongly suggest that no sensitive data has been disclosed. That is a provisional assessment from the company investigating the incident. It sits alongside its confirmed finding that information was extracted.

The advisory does not identify the acquired business, explain how the intruder gained access or specify the volume and type of information taken. Those omissions leave the extent of the exposure unresolved in the public account.

The distinction matters: keeping an intrusion away from operational systems can limit immediate disruption, while the consequences of the extracted information still depend on what it contained.

Booking services remain available

Maersk says customers can continue booking and managing shipments and that it does not anticipate operational disruption. It also reports no indication of impact through API or electronic data interchange connections.

The company has promised further updates if its findings identify affected parties or other relevant information. Until then, its assurance about the wider network remains tied to what investigators have established so far.

Some offers on this page may be paid placements or contain affiliate links.