Jawaharlal Nehru Port Container Terminal

In February 2022, the Jawaharlal Nehru Port Container Terminal (JNPT), India’s largest state-owned container port, fell victim to a cyberattack that crippled its IT infrastructure. Hackers infiltrated the port’s computer systems via the internet, forcing a complete shutdown of all IT operations in the terminal. Despite efforts by officials and cybersecurity experts, the systems remained non-functional for five consecutive days, halting automated operations.The attack led to massive operational disruptions, including the diversion of critical cargo to alternate ports and a reversion to manual processing, severely slowing down logistics. The port, handling nearly half of India’s container traffic, faced financial losses, reputational damage, and supply chain delays, impacting trade and commerce. The incident highlighted vulnerabilities in maritime cybersecurity, raising concerns over potential future attacks on essential infrastructure. No ransom demands were reported, but the prolonged outage underscored the attack’s severe operational and economic consequences.

Source: https://phaata.com/en/logistics-market/a-cyber-attack-hits-a-leading-container-terminal-in-nhava-sheva-india-1216.html

TPRM report: https://www.rankiteo.com/company/jnpt

"id": "jnp222092125",
"linkid": "jnpt",
"type": "Cyber Attack",
"date": "2/2022",
"severity": "100",
"impact": "6",
"explanation": "Attack threatening the economy of geographical region"

{'affected_entities': [{'industry': 'Logistics / Maritime',
                        'location': 'India (Navi Mumbai, Maharashtra)',
                        'name': 'Jawaharlal Nehru Port Container Terminal '
                                '(JNPT)',
                        'type': 'Port Authority / Government Entity'}],
 'attack_vector': 'Internet-based intrusion',
 'date_detected': '2022-02',
 'description': 'In February 2022, the India-based Jawaharlal Nehru Port '
                'Container Terminal (JNPT) was hacked. The attacker '
                "compromised the terminal's computer systems via the internet, "
                'shutting down all computers in the IT department. Officials '
                'and experts attempted to restart the systems, but the '
                'terminal remained non-operational for five days. This forced '
                'the diversion of essential cargo and required manual '
                'processing of terminal operations.',
 'impact': {'downtime': '5 days',
            'operational_impact': 'Terminal shutdown, cargo diversion, manual '
                                  'operations',
            'systems_affected': ['IT department computers']},
 'initial_access_broker': {'entry_point': 'Internet'},
 'response': {'remediation_measures': ['Attempts to restart systems'],
              'third_party_assistance': ['Computer experts']},
 'title': 'Cyberattack on Jawaharlal Nehru Port Container Terminal (JNPT)',
 'type': 'Cyberattack (System Shutdown)'}