by Manal Barakat, SeaNewsEditor
As digital technology advances in many sectors, its use in maritime shipping is no different. Many vessels are now seen as floating data centres that exchange real-time information globally.
Therefore, ports and ships have had to digitise their processes rapidly. However, this could expose them to various cyberattacks.
A study by five scientists from NHL Stenden University in Leeuwarden, Netherlands, highlights the vulnerability of the "Global Maritime Transportation System" (GMTS), which includes shipping companies, port operators, ship traffic controllers, and other transport-related entities.
The study recorded all publicly known cybersecurity incidents between 2021 and 2023 in the Maritime Cyber Attack Database (MCAD), noting around 290 attacks across 54 countries and over 50 ships.
They found that the number of incidents has surged, partly due to the Covid-19 pandemic, which exposed the fragility of global supply chains.
According to the NHL Stenden scientists, most attacks occurred in Europe and the North American Atlantic coast, with significant activity also in the Red Sea, Persian Gulf, and East China Sea.
The study says approximately 80% of these attacks are attributed to Russia, China, Iran, and North Korea. The university offers a public database that contains incidents worldwide.
Between 2021 and 2023, over 50 attacks targeted US companies and ships, with more than ten incidents involving the UK, Germany, South Korea, and France.
Given that 80% of global freight is transported by ship, and 59% of these vessels are over 20 years old, cyberattacks can cause substantial collateral damage.
Despite the significant threat, insurance companies claim that ship owners often hesitate to share information for fear of identification.
Common vulnerabilities that lead to such attacks include a lack of awareness, ineffective policies and procedures, and an underdeveloped cyber risk management culture.
Most attacks aim to breach corporate security, causing data loss, financial damage, or IT issues rather than taking control of vessels. Human error is estimated to account for up to 80% of offshore security breaches.
