Maritime Cybersecurity

Cyber attacks are a growing problem in the maritime industry. Attacks on ships and in ports pose significant threats as the industry increasingly relies on technology. As attacks continue to affect maritime businesses and workers, the industry must keep up with increased cybersecurity efforts.

What Is a Maritime Cyber Attack?

A maritime cyber attack is an attack on the information, communications, and other technological systems of a ship, port, or other maritime setting. Cybercriminals initiate these attacks to access systems, information, and data. Their goals may be to steal information, disrupt operations, manipulate data, or cause physical damage.

Cyber attacks may be general, in which criminals probe companies or ships for weak spots and take advantage of any they find. They can also be targeted or directed at a specific company, ship, port, or system.

A cyber attack in a maritime setting may involve one or more techniques:

• Phishing. Phishing involves targeting a large number of people, hoping for just one response that gets them into a system or access to information.
• Malware. Criminals often use harmful software to damage systems before owners or operators realize it has happened. Examples of malware include worms, spyware, viruses, and trojan horses. They are often sent through links in emails.
• Password Manipulation. Criminals may use software programs to systematically guess passwords to gain access.
• Social Engineering/Impersonation. Less high-tech ways of engineering a cyber attack include talking directly or virtually to people or impersonating someone to get information.

What Are the Consequences of Cyber Attacks in the Maritime Industry?

Cyber attacks can obviously cause economic harm. There are many additional and far-reaching consequences of these cyber attacks in the maritime setting:

• Disruption of shipping and port operations
• Compromised safety measures and systems
• Compromised communication and navigation systems on vessels
• Cargo theft and resulting financial losses
• Complications in geopolitical interests and relationships

These attacks can harm individual workers on ships and in ports. Financial losses and operational disruptions can cause them to lose work and income. Disruptions to safety systems, navigation, and communications can lead to accidents on ships that cause injuries.

Are Cyber Attacks on the Rise in the Maritime Industry?

Cyber attacks have increased as the industry’s reliance on technology has increased. In 2022, U.S. Department of Homeland Security Secretary Alejandro Mayorkas stated that cyber attacks are the most significant threat to U.S. ports. In 2024, the Biden Administration issued an executive order initiating changes that would increase security, including cybersecurity, at U.S. ports.

Ports and ships are increasingly targeted by cybercriminals who want to cause harm and disruptions, trigger political attacks, or steal information or cargo. These are just a few examples of maritime cyber attacks from the last few years:

• A ransomware attack in 2023 affected more than 1,000 vessels. The attack was against a software company that supplies ships. The company had to shut down servers for its ShipManager system.
• The Port of Lisbon, one of Europe’s busiest ports, suffered a cyber attack in 2022. The port’s website was affected and shut down for days. Fortunately, the attack did not significantly affect operations at the port. A ransomware gang called LockBit took credit for the attack and claimed to have stolen financial reports, contracts, ship logs, and other information.
• A 2022 attack on two German oil companies led to significant issues in the oil shipping and distribution industry. The attack forced Shell to reroute oil supplies and affected the companies’ loading and unloading systems. Similar attacks on German companies attempted to steal intellectual property.

How Does the Maritime Industry Protect Against Cyber Attacks?

Governments and individual companies are responsible for protecting the maritime industry against cyber attacks. Governments often support ports, while companies take responsibility for their ships.

Companies must be able to identify vulnerabilities and address them to prevent cyber attacks. This means keeping systems current, using the best anti-malware software, and creating and using security protocols.

Employers are also responsible for training workers and making them aware of the risks and signs of cyber attacks. Workers should know how to use technology safely and how to follow security protocols. Companies must routinely assess the state of their cybersecurity and make updates as needed.

Can You Sue and Recover Damages After a Cyber Attack?

Suing over a cyber attack is very complicated. It’s not always clear who initiated the attack, for instance. However, if negligence was involved in some way, there may be a case for filing a lawsuit and seeking damages.

Lawsuits may also be possible if security incidents involve breaches in contracts or regulatory violations. A maritime lawyer is an expert in all aspects of maritime law. They can evaluate a situation in which a cyber attack caused damages and determine if a lawsuit is possible.