The maritime industry is experiencing a surge in cyber attacks as geopolitical tensions drive state-linked hackers to target trade routes. According to researchers at the Netherlands’ NHL Stenden University of Applied Sciences, there were at least 64 cyber incidents in 2023, a significant increase from just three a decade ago and none in 2003. With over 80% of identified incidents originating from Russia, China, North Korea, or Iran, it is evident that the industry is facing a serious threat.
Here are some key points highlighting the escalating cyber security risks in the shipping sector:
- The International Chamber of Shipping, representing 80% of the world’s commercial fleet, warns of the unprecedented threat to the international rules-based order that has been in place since World War II.
- Recent state-linked cyber attacks have disrupted global trade, with conflicts from Ukraine to the Middle East impacting shipping, which handles over 80% of globally traded goods.
- Despite facing physical security threats for centuries, the maritime industry is ill-equipped to deal with online piracy due to low IT investments and the scarcity of experts with both maritime and cyber security knowledge.
- The increasing digitization of ships and the adoption of internet devices enabled by low Earth orbit satellites have opened up new vulnerabilities for cyber attacks, posing significant risks to the industry’s operations.
The repercussions of cyber incidents in the maritime sector are severe, with notable attacks such as the disruption of Iran’s Rajaee Port and the shutdown of the website of Europe’s largest port in Rotterdam. Danish shipowner AP Møller-Maersk’s experience with the NotPetya malware attack in 2017 serves as a stark reminder of the potential chaos that can ensue when IT systems are compromised.
In conclusion, the maritime industry must prioritize cyber security measures to mitigate the growing threat of cyber attacks that could disrupt global trade and jeopardize the operations of shipowners. It is crucial for the industry to invest in robust cyber security frameworks and bolster expertise in this field to safeguard against potential cyber threats in the future.
