Shipping giant A.P. Moller-Maersk has confirmed an IT security incident involving unauthorised access and data extraction from one of its local legacy systems. In a statement issued on 11 November 2026, the Danish company said its cyber security team launched a full investigation as soon as the issue was discovered and moved swiftly to secure the affected system. ## What Maersk has confirmed Maersk said the incident involved a local legacy system inherited through a previous acquisition. Its findings so far "strongly suggest no sensitive data has been disclosed", and the company said the incident appears isolated to that one system, with no sign of any impact on other Maersk systems or on customer and partner systems that connect through APIs and electronic data interchange. Maersk said it does not expect any disruption to customer operations, and customers can continue to book and manage shipments as usual. The investigation remains ongoing, and Maersk said it will update customers if further findings emerge. ## The hacker claim behind the statement The confirmation follows a claim by the hacker group WhiteArmor, which said on 7 November 2026 that it had stolen about 100GB of data from Maersk's OCF/LF Logistics platform and demanded around $5 million in bitcoin, with payment due by 7 December. The group alleged the haul included driver records, staff accounts and delivery documents. That claim has not been independently verified, and Maersk has not publicly confirmed that WhiteArmor was responsible. LF Logistics was acquired by Maersk in 2022 and now forms part of its warehousing and distribution operations. Maersk advised customers to treat any unexpected messages claiming to relate to the incident with caution and to verify them through their usual Maersk contact. [Reuters](https://www.reuters.com/technology/shipping-firm-maersk-investigates-it-security-incident-2026-11-11/) and [Maersk](https://www.maersk.com/news/articles/2026/11/11/it-security-incident)