Data breach

Maersk

Location not known7 sources

ReportedReported by the press on 7 Nov 2026. Whitearmor says it has data from Maersk. Maersk has not confirmed it.

Maersk: data breach reported

News coverage reports a data breach affecting Maersk.

See it on the live map Am I affected?

Location not known.

Sector: Transport and logistics
Records affected: 100K people, claimed by the attackers
Claimed by: Whitearmor
First reported: 7 Nov 2026
Latest source: 13 Nov 2026

What is known

Confirmed

No confirmed figure

Claimed

100,000 people

Claimed by Whitearmor. Not verified.

Data involved

Data types not stated

Cause

Cause not stated

Claimed: 7 Nov 2026
First seen by Black Shard: 9 Nov 2026

How it unfolded

7 Nov 2026
Claimed by Whitearmor on its leak site
11 Nov 2026
First press report, theregister.com

Sources

shipandbunker.comPress report13 Nov 2026shipandbunker.com
esecurityplanet.comPress report12 Nov 2026esecurityplanet.com
businessinsurance.comPress report12 Nov 2026businessinsurance.com
techradar.comPress report12 Nov 2026techradar.com
infosecurity-magazine.comPress report12 Nov 2026infosecurity-magazine.com
theregister.comPress report11 Nov 2026theregister.com
Leak-site claim by Whitearmor, tracked by RansomLook7 Nov 2026Listed on Whitearmor's leak site.

Status timeline

7 Nov 2026
Leak-site claim by Whitearmor, tracked by RansomLook
7 Nov 2026
Status: claimed
11 Nov 2026
Status: reported
11 Nov 2026
theregister.com, press report
12 Nov 2026
infosecurity-magazine.com, press report
12 Nov 2026
techradar.com, press report
12 Nov 2026
businessinsurance.com, press report
12 Nov 2026
esecurityplanet.com, press report
13 Nov 2026
shipandbunker.com, press report

Attacker group

Whitearmor
Claimed by the group on its leak site, 7 Nov 2026.

What to do

If you have an account, change that password, and anywhere you reused it.
Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
If payment cards were involved, watch statements and ask your bank for a new card.
If government ID or social security numbers were involved, consider a credit freeze.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 60%

The place 0%

7 independent sources. Location not known.

Not known yet

Attack dateData involvedA statement from the organisation

Update log

9 Nov 2026First seen.
11 Nov 2026Status changed from claimed to reported.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.

Data breach

Maersk

Location not known7 sources

ReportedReported by the press on 7 Nov 2026. Whitearmor says it has data from Maersk. Maersk has not confirmed it.

Maersk: data breach reported

News coverage reports a data breach affecting Maersk.

See it on the live map Am I affected?

Location not known.

Sector: Transport and logistics
Records affected: 100K people, claimed by the attackers
Claimed by: Whitearmor
First reported: 7 Nov 2026
Latest source: 13 Nov 2026

What is known

Confirmed

No confirmed figure

Claimed

100,000 people

Claimed by Whitearmor. Not verified.

Data involved

Data types not stated

Cause

Cause not stated

Claimed: 7 Nov 2026
First seen by Black Shard: 9 Nov 2026

How it unfolded

7 Nov 2026
Claimed by Whitearmor on its leak site
11 Nov 2026
First press report, theregister.com

Sources

shipandbunker.comPress report13 Nov 2026shipandbunker.com
esecurityplanet.comPress report12 Nov 2026esecurityplanet.com
businessinsurance.comPress report12 Nov 2026businessinsurance.com
techradar.comPress report12 Nov 2026techradar.com
infosecurity-magazine.comPress report12 Nov 2026infosecurity-magazine.com
theregister.comPress report11 Nov 2026theregister.com
Leak-site claim by Whitearmor, tracked by RansomLook7 Nov 2026Listed on Whitearmor's leak site.

Status timeline

7 Nov 2026
Leak-site claim by Whitearmor, tracked by RansomLook
7 Nov 2026
Status: claimed
11 Nov 2026
Status: reported
11 Nov 2026
theregister.com, press report
12 Nov 2026
infosecurity-magazine.com, press report
12 Nov 2026
techradar.com, press report
12 Nov 2026
businessinsurance.com, press report
12 Nov 2026
esecurityplanet.com, press report
13 Nov 2026
shipandbunker.com, press report

Attacker group

Whitearmor
Claimed by the group on its leak site, 7 Nov 2026.

What to do

If you have an account, change that password, and anywhere you reused it.
Turn on two-factor authentication, ideally an authenticator app or passkey, not SMS.
Expect phishing that uses your real details. Do not click links in messages about this incident; go to the company's site directly.
If payment cards were involved, watch statements and ask your bank for a new card.
If government ID or social security numbers were involved, consider a credit freeze.

Talk to our team 24/7 incident line: 1800 370 270

How sure we are

That it happened as stated 60%

The place 0%

7 independent sources. Location not known.

Not known yet

Attack dateData involvedA statement from the organisation

Update log

9 Nov 2026First seen.
11 Nov 2026Status changed from claimed to reported.

Under attack? Call the incident line.

Black Shard's team can check your exposure, take a fix off your plate or step in on a live incident.

Talk to our team Breach response

24/7 incident line1800 370 270Call first, then work through the first-hour steps.

What is known

How it unfolded

Sources

Status timeline

Attacker group

What to do

How sure we are

Update log

Other incidents linked to Whitearmor

Under attack? Call the incident line.

What is known

How it unfolded

Sources

Status timeline

Attacker group

What to do

How sure we are

Update log

Other incidents linked to Whitearmor

Under attack? Call the incident line.