DP World Australia

In November 2023, **DP World**, which manages **40% of Australia’s maritime freight**, suffered a **cybersecurity incident** that forced it to **suspend operations** at key port terminals in **Sydney, Melbourne, Brisbane, and Fremantle**. The company **disconnected its computer systems** from the network to contain the threat, resulting in a **complete operational halt**. The disruption stranded **30,000 shipping containers**, severely impacting the movement of goods into and out of Australia. The Australian federal government classified the incident as **nationally significant** due to its broad economic consequences. Additionally, the attack **compromised data of current and former employees**, exacerbating internal risks. The incident caused **major supply chain disruptions**, financial losses for businesses reliant on maritime trade, and raised concerns over **critical infrastructure vulnerability** in the region.

Source: https://www.bbc.com/news/business-67400164

TPRM report: https://www.rankiteo.com/company/awh-pty-ltd

"id": "awh633092125",
"linkid": "awh-pty-ltd",
"type": "Cyber Attack",
"date": "11/2023",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'industry': 'Transportation/Logistics',
                        'location': 'Australia (Sydney, Melbourne, Brisbane, '
                                    'Fremantle)',
                        'name': 'DP World Australia',
                        'type': 'Maritime Logistics Company'}],
 'data_breach': {'personally_identifiable_information': True,
                 'sensitivity_of_data': 'High (personally identifiable '
                                        'information likely included)',
                 'type_of_data_compromised': ['Employee data (current and '
                                              'former)']},
 'date_detected': '2023-11',
 'date_publicly_disclosed': '2023-11',
 'description': 'DP World, which manages 40% of the maritime freight in '
                'Australia, reported a cybersecurity incident that led to the '
                'suspension of operations at its port terminals in Sydney, '
                'Melbourne, Brisbane, and Fremantle. The company responded by '
                'disconnecting its computer systems from the network, causing '
                'an operational halt and stranding approximately 30,000 '
                'shipping containers. The incident was deemed nationally '
                'significant by the Australian federal government due to its '
                'impact on goods movement. Employee data (current and former) '
                'was compromised during the incident.',
 'impact': {'data_compromised': ['Employee data (current and former)'],
            'downtime': 'Ongoing operational halt during incident period '
                        '(exact duration unspecified)',
            'identity_theft_risk': 'Potential (employee data compromised)',
            'operational_impact': 'Suspension of port operations; 30,000 '
                                  'shipping containers stranded; nationally '
                                  'significant disruption to goods movement',
            'systems_affected': ['Port terminal computer systems (Sydney, '
                                 'Melbourne, Brisbane, Fremantle)']},
 'investigation_status': 'Ongoing (as of November 2023)',
 'regulatory_compliance': {'regulatory_notifications': ['Australian federal '
                                                        'government '
                                                        '(Australian Cyber '
                                                        'Security '
                                                        'Coordinator)']},
 'response': {'containment_measures': ['Restricted access to computer systems',
                                       'Disconnected systems from the network'],
              'incident_response_plan_activated': True},
 'title': 'DP World Australia Cybersecurity Incident (November 2023)',
 'type': 'Cybersecurity Incident (Operational Disruption, Data Breach)'}