Maersk confirms data theft from one acquired legacy system
Maersk confirmed that data was exfiltrated from one legacy system inherited through an acquisition. Its preliminary findings indicate sensitive data was likely unaffected. The investigation is ongoing.
- Disclosed
- Nov 11, 2026
- Public disclosure date
- Severity
- Sharted
- No CVE: a breach, not a bug
- Splash zone
- One acquired legacy system. Maersk reports no indication of impact to customer or partner API and EDI integrations.
- Maersk · logistics · data breach
- In the wild
- Yes
- Maersk confirmed exfiltration from the affected system.
What happened
Maersk says it took steps to secure the local system and began an investigation. It expects no disruption to its operations and advised customers to continue booking and shipping. It reported no indication of impact to its other systems or to customer and partner integrations. Its initial assessment of sensitive data may change as the investigation proceeds. The notice gives no affected-record count or intrusion method.
Crime-scene timeline
Nov 11, 2026
Maersk discloses the incident
The company confirms data was exfiltrated from one legacy system and says the investigation is ongoing.
Who said what
We list each claim and who made it. Primary sources (the vendor, the researcher, the registry) are marked. Where reports disagree, we grade by the worst credible case.
- Maersk incident noticePrimaryConfirms exfiltration, gives the preliminary assessment of sensitive data and describes service and integration status.