DNV

In January 2023, Oslo-based **DNV**—a leading global maritime classification society and risk management provider—fell victim to a **ransomware attack** on January 7, forcing the shutdown of IT servers linked to its **ShipManager system**. The incident disrupted operations for **70 customers**, impacting approximately **1,000 vessels** reliant on the system for navigation, safety, and compliance management. DNV initiated daily communications with affected clients, providing updates from ongoing forensic investigations. While the attack caused significant operational disruptions—potentially halting vessel management, logistical coordination, and regulatory compliance—the company did not confirm whether sensitive customer or proprietary data was exfiltrated. The shutdown of critical IT infrastructure posed risks to maritime safety, supply chain continuity, and DNV’s reputation as a trusted industry authority. Recovery efforts focused on restoring systems while mitigating further propagation of the ransomware.

Source: https://www.dnv.com/news/cyber-attack-on-shipmanager-servers-update-237931

TPRM report: https://www.rankiteo.com/company/dnv

"id": "dnv905092125",
"linkid": "dnv",
"type": "Ransomware",
"date": "1/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'customers_affected': '70',
                        'industry': 'Maritime',
                        'location': 'Oslo, Norway',
                        'name': 'DNV',
                        'type': 'Organization'}],
 'customer_advisories': 'Daily updates provided to 70 affected customers',
 'date_detected': '2023-01-07',
 'date_publicly_disclosed': '2023-01-07',
 'description': 'In January 2023, Oslo-based DNV – one of the world’s largest '
                'maritime organizations – was hit with ransomware on the '
                'evening of January 7 and was forced to shut down the IT '
                'servers connected to their ShipManager system. DNV is '
                'communicating daily with all 70 affected customers to update '
                'them on findings of the ongoing forensic investigations. In '
                'total, around 1000 vessels are affected.',
 'impact': {'operational_impact': '1000 vessels affected; IT servers shut down',
            'systems_affected': ['ShipManager system']},
 'investigation_status': 'Ongoing (as of January 2023 disclosure)',
 'ransomware': {'data_encryption': True},
 'response': {'communication_strategy': 'Daily updates to 70 affected '
                                        'customers on forensic investigation '
                                        'findings',
              'containment_measures': ['Shut down IT servers connected to '
                                       'ShipManager system'],
              'incident_response_plan_activated': True},
 'title': 'DNV Ransomware Attack (January 2023)',
 'type': 'Ransomware'}