Live threats
HighUnpatched Check Point Gateways Exploited via PHP2Shell, Granting Root Access and Enabling Wiper Attacks BreachUS DOJ Seizes $1.2 B Stolen from Binance Theft and Disrupts North Korean ‘FaceStealer’ Social‑Engineering Tool Rule changeFederal Register limits automated scraping of its sites, directing users to APIs DeadlineFrench court orders DNS resolver Quad9 to block sites, prompting its withdrawal from France CriticalZoom Patches Critical Windows Privilege‑Escalation Flaws (CVE‑2026‑108186 & CVE‑2026‑108187) BreachWhiteArmor Gang Claims Theft of 100 GB Data from Maersk’s Legacy Logistics Platform Rule changeNIST announces single process for NCCoE project participation via letters of interest CriticalCritical Node2Shell (CVE‑2026‑111497) Buffer Overflow Threat to Siemens Desigo & Gridscale Products
Updated 08:43 UTC All intelligence →
Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
EN
JoinJoin
BREACH WATCH BRIEF High 👤 Breach

Maersk Confirms Access to Legacy LF Logistics System, No Customer Impact

Maersk disclosed that threat actors breached a legacy system inherited from its 2022 acquisition of LF Logistics. No sensitive data was found to be disclosed and core Maersk services remain unaffected. The incident highlights the need for robust third‑party risk oversight and continuous monitoring of inherited assets.

ADTP Breach Watch · November 12, 2026 · The Record
SeverityHigh
Type👤 Breach
ConfidenceHigh
ReportedNov 12, 2026
Transportation & Logistics Shipping and logistics companies Port authorities integrating third‑party systems Third-Party Dependency Data Exfiltration
Check if you use it. This incident came through a third party or the supply chain. If the product or supplier is in your estate or your vendors', start with the questions to ask below.

What happened

Maersk reported that attackers accessed a legacy system from its 2022 acquisition of LF Logistics; the breach appears isolated, with no confirmed data loss or service disruption for Maersk customers.

Why it matters for trust and compliance

  • The incident underscores the importance of continuous vendor oversight and evidence‑driven monitoring to satisfy control objectives across multiple frameworks.
  • Demonstrates the need for continuous monitoring of third‑party assets to provide audit‑ready evidence.
  • Highlights the value of a unified Trust Center to map legacy system controls against framework requirements.

Who is affected

Shipping and logistics companies Port authorities integrating third‑party systems

Recommended actions

  1. Inventory all acquired and legacy assets and map them to current security baselines.
  2. Enforce strict network segmentation and access controls for legacy environments.

Regulations library

Every US state privacy law, on one map

24 states have a comprehensive privacy law in the library, alongside the EU, UK, US federal and global laws: 102 in all, each explained in plain words with its sources. Select a state to see what applies there.

Explore the mapFollow Regulatory Watch
  • In force
  • Coming into force
  • Sector laws
AK ME VT NH WA ID MT ND MN IL WI MI NY RI MA OR NV WY SD IA IN OH PA NJ CT CA UT CO NE MO KY WV VA MD DE AZ NM KS AR TN NC SC DC OK LA MS AL GA HI TX FL

Get the Breach Digest

The incidents that matter for your vendors and your data, analyzed for practitioners, in one email.