International logistics giant DP World has confirmed that there was a data breach during the recent cyberattack that disrupted its operations in Australia. However, the company says no ransomware payloads or encryption were used in the attack.
On November 10, 2023, DP World Australia, which handles 40% of the country's shipping container trade, was hit by a hacking attack that disrupted cargo movements at five ports. The disruption left 30,137 cargoes stranded at docks and available storage space filled.
According to BleepingComputer, port operations resumed on November 13th and returned to normal a few days later, November 17th to 20th.
See also: Hotel data breach: What conditions did the hackers set?
After an investigation, DP World determined that the security only affected its Australian operations. At the same time, it found no signs of ransomware development on the compromised systems.
“’s investigation DP World Australia confirmed that the incident was limited to Australian operations and did not impact any other markets where DP World operates,” DP World told BleepingComputer.
“It also confirmed that no ransomware was found or deployed within the DP World Australia network (no ransomware executable , no encrypted files, and no ransom demand).“.
However, the attack did not only cause disruptions to cargo transport at the ports. As DP World has now revealed, there was also a data breach, after hackers managed to steal some data from systems .
“While the investigation showed that customer data was not affected, some of the affected data includes the personal details of current and former employees DP World Australia“.
See also: Welltok: Data breach affects 8.5 million patients
The company said it will notify all individuals affected by the data breach and offer them support through a team of experts. It will also offer services to mitigate the risks of identity theft and fraud associated with the data exposure.
At this time it is not clear who is behind the attack nor do we know exactly the type of attack.
The Australian Cybersecurity Coordinator, the Australian Cybersecurity Centre, the Australian Federal Police, the Department of Home Affairs and the Office of the Australian Information Commissioner have been informed of the situation and are working closely with DP World to mitigate the impact of the attack.
DP World has to take many security measures to protect its customers. One of the key measures is the implementation of a strong security system. This system traffic data and detects anomalies or possible interference from external intruders. If any threat is detected, the system responds immediately to limit its impact.
In addition, DP World must invest in robust malware prevention and detection measures. Reliable antivirus programs must be used on all company computers and networks to respond to potential threats. These measures help prevent malware intrusions and protect company, employee and customer data.
See also: Kansas Courts: Data Breach After Recent Cyberattack
Additionally, strict employee access and security policies should be implemented . Only authorized personnel should have access to sensitive data, and there should be strict protocols for accessing and using this data.
Finally, DP World must regularly conduct security assessments and review its processes to ensure the effectiveness of its security measures. These assessments include examining the systems, procedures and policies in place, as well as upgrading equipment and software where necessary.
Source: www.bleepingcomputer.com
