Henry Clack, a solicitor at London’s HFW law firm, frequently represents global shipping companies targeted by cybercriminals, especially Nigerian organised gangs.
“Of the cases which HFW have been involved in, the most common counterparties that we’ve encountered are Nigerian organised criminal organisations,” Clack stated.
These groups carry out “man-in-the-middle” frauds, intercepting communications to steal sensitive data or seize control of IT systems, then demand ransom to restore access.
HFW’s data shows a sharp rise in maritime cyberattacks, with the average response cost doubling to around $550,000 between 2022 and 2023. Ransom payments average $3.2 million in more severe breaches. Since over 80% of global trade moves by sea, such attacks increase costs and reduce shipping capacity.
John Stawpert of the International Chamber of Shipping explains, “Cybersecurity is a major concern for the shipping industry. Shipping has been listed as one of the top 10 targets for cyber criminals globally.” Research by NHL Stenden University reveals attacks grew from 10 in 2021 to over 60 last year, with many linked to the governments of Russia, China, North Korea, and Iran.
Alongside state-backed attacks, financially motivated hackers exploit the growing digital access points in shipping, including new satellite systems like Elon Musk’s Starlink. The ageing fleet, with an average ship age of 22 years, and piecemeal digitisation further increase vulnerabilities.
GPS spoofing, where ships receive false location data, presents a critical risk. Ark Diamant of Claroty says, “GPS spoofing means sending the navigation system a false location. It can even be damaged physically if it gets into shallow waters.” The container ship MSC Antonia ran aground recently amid suspected spoofing, while regional conflicts have seen similar incidents blamed on hostile actors.
Regulators have stepped up cybersecurity mandates. The International Maritime Organization updated its Safety Management Code in 2021 to require stronger cyber risk measures.
Industry awareness has also improved significantly. Communication with hackers usually involves brief online messages during ransom negotiations. As maritime trade remains vital globally, the shipping sector must balance digital innovation with robust cybersecurity to protect against escalating threats.