Shipping Industry Remains “Easy Target”, Pays Average US $3.2m In Cyberattacks – Report

New research has found that the maritime industry remains an “easy target” for cybercriminals, and that the cost of attacks and demand for ransom payments across the sector have skyrocketed over the past 12 months.

The report, which was produced by global, sector-focused law firm HFW and maritime cyber security company CyberOwl, reveals that the average cyberattack in the maritime industry now ends up costing the target organisation US$550,000 – up from US$182,000 in 2022.

Cyber Attack
Representation Image

It also shows that demands for ransom have increased by more than 350%, with the average ransom payment now US$3.2m – up from US$3.1m last year.

The report is based on a survey of more than 150 industry professionals – including C-suite leaders, cyber security experts, seafarers, shoreside managers, and suppliers – and reveals significant gaps in cyber risk management that exist across shipping organisations and the wider supply chain, despite progress made by IMO 2021.

The research was carried out by the maritime technology research agency Thetius.

Key findings include:

  • The financial cost of a maritime cyberattack can be extreme:
  • they now end up costing the target organisation US$550,000 on average (an increase of 200% from 2022)
    ransom demands have increased by more than 350% over the past 12 months, with the average ransom payment now US$3.2 million (up from US$3.1m in 2022)
  • 24% of the victims of cyberattacks were tricked into transferring funds to criminal organisations
    Despite these eye-watering costs, most shipping organisations significantly under-invest in cyber security management:
  • a third spend less than US$100,000 per year
  • 25% of survey respondents said their organisation does not have insurance to cover cyber risk

Although overall levels of preparedness seem to be improving:

  • 80% of survey respondents understand what actions would be required of them in the event of a cyber security incident (up from 74% in 2022)
  • 64% said their organisation has cyber risk management procedures for dealing with suppliers (up from 55% in 2022)

Tom Walters, Partner, HFW:

“Our findings show that while maritime cyber security has improved, the industry remains an easy target. Shipping organisations are being subject to more cyberattacks than ever before, and the cost of attacks and demand for ransom payments have skyrocketed. And as the use of technology continues to increase across all aspects of shipping – from ship networks to offshore installations and shoreside control centres – so does the potential for cybersecurity breaches.

“Maritime operational technology and fleet operations management are now almost entirely digital, meaning that a cyberattack could compromise anything from vessel communication systems and navigation suites to the systems managing ballast water, cargo management, and engine monitoring and control. Failure of any of those systems could result in a vessel being stranded and potentially grounded, and we saw from the Ever Given the impact that can have on global supply chains. This is a critical issue for all parties involved in the shipping sector, and it’s clear that the industry has to do more to protect itself against cyberattacks.”

Daniel Ng, CEO, CyberOwl:

“The good news is that the conversation on vessel cyber risk management has clearly shifted away from the ‘why’ towards the ‘how’. There is less scepticism about the need to manage the risk, more thoughtfulness on how best to spend each dollar in shoring up defences.

“The challenge for the change agents in shipping is that they are dealing with new risks in a new domain under sector-specific constraints. All of this in an environment where shipping companies are still too secretive to share benchmarks and best practice widely. The sector must make the most of the specialist expertise available. And those with specialist maritime cyber security knowledge must do more to share knowledge of risks and best practice.

“What works in other sectors may not work in shipping. And applying a generic approach could lead to expensive wastage.”

Nick Chubb, Managing Director, Thetius:

“Our research shows that the industry has improved dramatically in a short space of time. But it also shows that cybercriminals are evolving faster. The costs of cyber-attacks are growing. The impact that can be created in the global supply chain by exploiting a single easy target means the entire maritime industry needs to raise the bar.”

Press Release

Disclaimer :
The information contained in this website is for general information purposes only. While we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.

In no event will we be liable for any loss or damage including without limitation, indirect or consequential loss or damage, or any loss or damage whatsoever arising from loss of data or profits arising out of, or in connection with, the use of this website.

Disclaimer :
The information contained in this website is for general information purposes only. While we endeavour to keep the information up to date and correct, we make no representations or warranties of any kind, express or implied, about the completeness, accuracy, reliability, suitability or availability with respect to the website or the information, products, services, or related graphics contained on the website for any purpose. Any reliance you place on such information is therefore strictly at your own risk.


Do you have info to share with us ? Suggest a correction

About Author

Marine Insight News Network is a premier source for up-to-date, comprehensive, and insightful coverage of the maritime industry. Dedicated to offering the latest news, trends, and analyses in shipping, marine technology, regulations, and global maritime affairs, Marine Insight News Network prides itself on delivering accurate, engaging, and relevant information.

About Author

Marine Insight News Network is a premier source for up-to-date, comprehensive, and insightful coverage of the maritime industry. Dedicated to offering the latest news, trends, and analyses in shipping, marine technology, regulations, and global maritime affairs, Marine Insight News Network prides itself on delivering accurate, engaging, and relevant information.

Read More Articles By This Author >

By subscribing, you agree to our Privacy Policy and may receive occasional deal communications; you can unsubscribe anytime.

BE THE FIRST TO COMMENT

Leave a Reply

Your email address will not be published. Required fields are marked *