# Maersk confirms data breach as WhiteArmor ransomware demands $5 million

Source: [BleepingComputer](https://www.bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million/) · 2026-11-11 · Security
Page: https://themorning.dev/story/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million-4c32248b415f7e41
Kind: security · Impact: high

## In brief

- Maersk confirmed a data breach after a threat actor accessed a local legacy system inherited through an earlier acquisition and extracted data from it.
- WhiteArmor ransomware group reportedly demands $5 million.
- Maersk says it immediately launched an investigation into the IT security incident.

## Why it matters

A large shipping and logistics company has confirmed data theft from a legacy system, and an extortion demand has been reported, showing how acquired systems can become an entry point for attackers.

## Timeline

- 2026-11-11: Maersk issued a statement confirming an IT security incident involving potential data theft from a legacy system
- 2026-11-11: BleepingComputer reported that WhiteArmor ransomware demands $5 million

## Coverage

- [Maersk confirms data breach as WhiteArmor ransomware demands $5 million](https://www.bleepingcomputer.com/news/security/maersk-confirms-data-breach-as-whitearmor-ransomware-demands-5-million/) — BleepingComputer, 2026-11-11
- [Shipping giant Maersk probes 'IT security incident,' data theft](https://www.theregister.com/security/2026/11/11/shipping-giant-maersk-probes-it-security-incident-data-theft/5309096) — www.theregister.com - Articles, 2026-11-11

Tags: data-breach, ransomware, incident-response, legacy-systems, supply-chain

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev