DNV (Det Norske Veritas)

In January 2023, Oslo-based DNV—a leading global maritime classification society and risk management provider—fell victim to a ransomware attack on January 7. The cyberattack forced the company to shut down IT servers linked to its ShipManager system, a critical platform used for vessel operations and fleet management. The incident disrupted services for 70 affected customers, impacting around 1,000 vessels worldwide. DNV engaged in daily communications with clients to provide updates on forensic investigations, though the full extent of data compromise or operational downtime was not immediately disclosed. The attack highlighted vulnerabilities in maritime cybersecurity, raising concerns over potential cascading effects on global shipping logistics, safety compliance, and customer trust. While no direct evidence of data theft was confirmed in the initial reports, the operational outage and reliance on manual workarounds posed significant risks to DNV’s reputation and financial stability, given its role in certifying vessel safety and regulatory compliance.

Source: https://www.theregister.com/2023/01/19/ransomware_attack_cuts_1000_ships/

TPRM report: https://www.rankiteo.com/company/cfarer

"id": "cfa518092125",
"linkid": "cfarer",
"type": "Ransomware",
"date": "1/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': '70',
                        'industry': 'maritime',
                        'location': 'Oslo, Norway',
                        'name': 'DNV',
                        'size': 'large (one of the world’s largest maritime '
                                'organizations)',
                        'type': 'organization'}],
 'customer_advisories': 'daily updates provided to 70 affected customers',
 'date_detected': '2023-01-07',
 'date_publicly_disclosed': '2023-01-07',
 'description': 'Oslo-based DNV – one of the world’s largest maritime '
                'organizations – was hit with ransomware on the evening of '
                'January 7, 2023, forcing the shutdown of IT servers connected '
                'to their ShipManager system. The attack affected around 1,000 '
                'vessels and 70 customers, with DNV providing daily updates on '
                'forensic investigations.',
 'impact': {'operational_impact': '1,000 vessels and 70 customers affected; IT '
                                  'servers shut down',
            'systems_affected': ['ShipManager system']},
 'investigation_status': 'ongoing (as of January 2023 disclosure)',
 'response': {'communication_strategy': 'daily updates to 70 affected '
                                        'customers on forensic investigation '
                                        'findings',
              'containment_measures': ['shut down IT servers connected to '
                                       'ShipManager system'],
              'incident_response_plan_activated': True},
 'title': 'DNV Ransomware Attack (January 2023)',
 'type': 'ransomware'}