Greek Shipping Company hit by a hacking attack

In 2010–2011, DryShips, a Greek shipping company, fell victim to a targeted cyber attack orchestrated by local pirates in the Gulf of Aden. The pirates hired hackers to infiltrate the company’s headquarters in Athens by exploiting vulnerabilities in its Wi-Fi infrastructure. The attackers gained unauthorized access to the company’s IT systems, extracting critical operational data, including ship routes, timetables, and security weaknesses of vessels transiting high-risk piracy zones. The stolen intelligence enabled pirates to precisely target and hijack DryShips’ vessels, leading to multiple successful raids in the Gulf of Aden. The attacks resulted in financial losses from ransom payments, cargo theft, and operational disruptions, alongside severe reputational damage due to the company’s inability to secure its fleet. While no direct data breach of customer or employee records was reported, the incident exposed gaps in cyber-physical security, demonstrating how cyber espionage could directly facilitate real-world criminal operations. The case underscored the emerging threat of cyber-enabled piracy, where digital intrusions translate into physical threats to maritime trade.

Source: in

TPRM report: https://www.rankiteo.com/company/intercargo

"id": "int812092125",
"linkid": "intercargo",
"type": "Cyber Attack",
"date": "6/2010",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'maritime',
                        'location': 'Greece',
                        'type': 'shipping company'}],
 'attack_vector': ['compromised Wi-Fi equipment',
                   'physical access to office network'],
 'data_breach': {'data_exfiltration': True,
                 'sensitivity_of_data': 'high (enabled physical attacks)',
                 'type_of_data_compromised': ['operational data',
                                              'logistical data',
                                              'ship vulnerability '
                                              'assessments']},
 'description': 'Local pirates hired hackers to breach a Greek shipping '
                "company's IT systems via Wi-Fi equipment installed at the "
                "company's office. The hackers identified vulnerable ships, "
                'routes, and timetables, enabling successful pirate attacks in '
                'the Gulf of Aden between 2010 and 2011.',
 'impact': {'brand_reputation_impact': ['potential loss of trust in maritime '
                                        'security',
                                        'reputational damage from pirate '
                                        'attacks'],
            'data_compromised': ['ship routes',
                                 'timetables',
                                 'vessel vulnerability assessments',
                                 'operational data'],
            'operational_impact': ['enabled physical pirate attacks',
                                   'compromised ship security',
                                   'disrupted maritime operations'],
            'systems_affected': ['IT systems at local HQ',
                                 'Wi-Fi network',
                                 'operational databases']},
 'initial_access_broker': {'entry_point': 'Wi-Fi equipment installed at '
                                          'company office',
                           'high_value_targets': ['vulnerable ships',
                                                  'routes',
                                                  'timetables'],
                           'reconnaissance_period': '2010-2011'},
 'motivation': ['financial gain (piracy)',
                'operational disruption',
                'intelligence gathering for physical attacks'],
 'post_incident_analysis': {'root_causes': ['compromised Wi-Fi security',
                                            'lack of physical security for '
                                            'network devices',
                                            'insufficient monitoring of '
                                            'third-party threats']},
 'threat_actor': ['hackers-for-hire', 'local pirates (Gulf of Aden)'],
 'title': 'Greek Shipping Company Cyberattack Facilitating Pirate Attacks '
          '(2010-2011)',
 'type': ['cyber-espionage',
          'unauthorized access',
          'third-party attack (pirate-facilitated)'],
 'vulnerability_exploited': ['weak Wi-Fi security',
                             'lack of network segmentation',
                             'insufficient physical security for network '
                             'devices']}