Danish shipping company Maersk said threat actors gained access to a legacy system from a previous acquisition and that the incident does not affect other parts of the firm, The Record reported Thursday¹.

Maersk said its findings suggest no sensitive data has been disclosed and that it does not anticipate disruptions for customers¹. The company said the incident is isolated to a local system and that it found no indication of impact on other Maersk systems or on customer and partner systems that connect through integrations such as APIs and EDI¹.

The Record said Maersk provided few details on the attack¹. It said the statement came three days after the WhiteArmor ransomware gang claimed it attacked LF Logistics, a Hong Kong-based transportation and logistics company Maersk acquired in 2022¹.

WhiteArmor claimed it stole 100GB of data from LF Logistics and demanded $5 million within 30 days, according to The Record, which cited a Comparitech post on X¹. The stolen data allegedly includes information on LF Logistics drivers, warehouses and customers¹. Maersk has not publicly confirmed that the claimed LF Logistics intrusion is the same incident described in its statement¹.

The Record placed the Maersk notice in a wider run of attacks on ports and shipping organizations, including a ransomware incident last week at Brazil's Port of Santos, which the outlet said was still restoring systems¹. It also noted Maersk's earlier NotPetya-era disruption and later ransomware affecting specific port operations¹.

What remains unknown includes the attacker, whether data left the legacy system, and whether WhiteArmor's LF Logistics claim matches Maersk's account¹.