2026-11-12
Maersk Security Incident (November 2026): Data Extracted from a Legacy System from a Past Acquisition, Findings So Far Strongly Suggest No Sensitive Data Disclosed. What Customers and Partners Should Do
Shipping group A.P. Moller – Maersk said on November 11, 2026 that it identified unauthorised access and data extraction from one of its local legacy systems from a previous acquisition. According to the company, a full investigation was launched immediately and is ongoing, and swift action was taken to secure the affected system. Its findings so far strongly suggest no sensitive data has been disclosed. The incident is isolated to a local system, and it has found no indication of impact on other Maersk systems or on customer and partner systems that connect through integrations such as APIs and EDI. It does not anticipate disruption to operations, and customers can keep using Maersk platforms to book and manage shipments. The statement does not give the number of records, the types of data extracted, the date of discovery or the cause. The company asks customers to treat unexpected communications claiming to relate to the matter with caution and to verify them through their usual Maersk contact. Our view: customers and partners should verify such messages, and any request to change payment details, through channels they already know. Operators should review and isolate legacy systems inherited through acquisitions.