Norwegian delivery classification society DNV has been hit by a ransomware (opens in new tab) assault which compelled the corporate to close down a few of its servers.

The assault affected roughly 1,000 ships utilizing DNV’s ShipManager software program – a software that its prospects use to observe totally different options of their delivery fleets. 

DNV says some 300 firms use the software to handle greater than 7,000 ships. Of that quantity, 70 corporations managing some 1,000 ships have been affected by the incident – round 15% of the whole fleet. 

TechRadar Professional wants you! (opens in new tab) We need to construct a greater web site for our readers, and we’d like your assist! You are able to do your bit by filling out our survey (opens in new tab) and telling us your opinions and views concerning the tech trade in 2023. It’s going to solely take a couple of minutes and all of your solutions might be nameless and confidential. Thanks once more for serving to us make TechRadar Professional even higher.

D. Athow, Managing Editor

Unknown attackers

Onboard, offline functionalities of the software program can nonetheless be used, the corporate additional stated, including that different techniques onboard the vessels should not impacted by the ransomware assault. Moreover, the ships can nonetheless function.

In addition to the ShipManager servers, different servers and different information have been additionally not affected, the corporate additionally stated. 

Different particulars concerning the incident are lacking. The corporate didn’t say which group was behind the assault, or how the ransomware was deployed (if any malware, phishing, or social engineering was used within the assault). No teams have but taken duty for the assault. 

We additionally don’t know the ransom demand, or the deadlines, as the corporate has declined to touch upon the potential for delicate information being stolen, and likewise refused to say if the assault would trigger any delays for ships and cargo.

Nonetheless DNV did affirm that the police and different legislation enforcement businesses have been notified. 

“The assault has been reported to the Norwegian Police, who has knowledgeable related police businesses. It was additionally reported to the Norwegian Nationwide Safety Authority, the Norwegian Knowledge Safety Authority (DPA) and the German Cyber Safety Authority. All affected prospects have been notified about their duty to inform related Knowledge Safety Authorities of their international locations,” the group acknowledged.

• Try the perfect endpoint safety (opens in new tab) companies round

By way of: TechCrunch (opens in new tab)