Maersk confirms data extraction from a local legacy system, WhiteArmor claims about 100 GB

CHRONOS Cybersecurity & Infrastructure category illustration. Illustrative only, not specific to this event. — Illustrative image, not a photograph of this event.

Urgency: L3
: 76
: 80
: 60
: 70
: 85

At a glance

On Nov 11, 2026 Maersk confirmed an IT security incident involving unauthorised access and data extraction from one of its local legacy systems. Reporting attributes an extortion claim to a group called WhiteArmor, which said it had about 100 GB of information allegedly exfiltrated from Maersk’s logistics and supply-chain platform. Maersk is investigating and the scope and sensitivity of any exposed records remain unconfirmed.

Maersk confirmed a legacy-system data extraction on Nov 11, 2026; a group named WhiteArmor claims about 100 GB of stolen data. Scope and sensitivity are unconfirmed.

CHRONOS Wire · November 12 · Alert 2

What happened

On November 11, 2026, Maersk said an attacker accessed and extracted data from one of its local legacy systems. A group calling itself WhiteArmor claims it has about 100 GB of data taken from Maersk’s logistics and supply-chain platform. Maersk is investigating and it is not yet confirmed what specific records, if any, were exposed.

Why it matters

A major global logistics operator has publicly acknowledged data extraction and an extortion claim; rapid monitoring is needed to detect any publication of data or customer-impacting disclosures.

CHRONOS Bottom Line

Maersk acknowledged on Nov 11, 2026 that one of its local legacy systems experienced unauthorised access and data extraction; a group called WhiteArmor claims about 100 GB of data. Investigations are ongoing and the scope and sensitivity of any exposed records remain unconfirmed.

Full detail

What changed

Maersk publicly confirmed on November 11, 2026 that it is investigating unauthorised access and data extraction from one of its local legacy systems, and reporting links the incident to claims by a group named WhiteArmor alleging roughly 100 GB of exfiltrated data.

What is genuinely new

Maersk publicly acknowledged the incident on 2026-11-11 and reporting links the incident to claims by WhiteArmor alleging roughly 100 GB of exfiltrated data.

Detailed analysis

On Nov 11, 2026 Maersk confirmed it is investigating an IT security incident involving unauthorised access and data extraction from one of its local legacy systems. Subsequent reporting attributes an extortion claim to a group calling itself WhiteArmor, which said it possessed about 100 GB of information allegedly exfiltrated from Maersk’s logistics and supply-chain platform. There is currently no independent public verification of the dataset contents or sensitivity.

U.S. Impact

U.S. Impact assessment pending.