马士基披露一起IT安全事件:本地遗留系统遭未授权访问
IT security incident
马士基披露一起IT安全事件,其本地遗留系统遭未授权访问和数据提取,安全团队已启动全面调查,调查仍在进行。截至目前的调查结果强烈表明未披露敏感数据,事件仅限于本地系统,未发现对其他马士基系统及通过API、EDI等集成连接的客户与合作伙伴系统的影响。马士基表示目前预计客户运营不受影响,可照常用其平台订舱和管理货物,并提醒对声称与此事相关的意外通信保持警惕、通过平常的马士基联系人核实。
A.P. Moller – Maersk has identified an IT security incident involving unauthorised access and data extraction from one of our local legacy systems from a previous acquisition. We take cyber security and data protection very seriously and would like to keep our customers informed about the incident.
Once the Maersk Cyber Security team discovered the issue, a full investigation was immediately launched and remains ongoing, with swift action being taken to secure the affected system.
Our findings so far strongly suggest no sensitive data has been disclosed. The incident is isolated to a local system, and we have found no indication that there has been any impact on other Maersk systems or customer and partner systems that connect to Maersk through integrations such as APIs and EDI.
We do not anticipate disruption to operations for customers at this time, and customers can continue to use Maersk platforms to book and manage their shipments as usual.
We will keep customers updated as more relevant information becomes available, and if we identify any need to inform impacted parties of any further findings, we will do so.
Cyber security remains a constant, ongoing priority for Maersk. We have rigorous processes in place to identify and prevent incidents and minimise customer impact.
As always, please treat any unexpected communications claiming to relate to this matter with caution and verify them through your usual Maersk contact.
Thank you for your patience as we continue to investigate the incident. Should you have any questions, please don’t hesitate to contact your local Maersk representative.
来源:马士基运营公告 · maersk.com