MALAYSIA’S Port of Tanjung Pelepas, one of the world’s largest container transhipment hubs, has confirmed that a cybersecurity incident forced the temporary suspension of terminal operations this week disrupting activity.

PTP said the incident was detected at 2334 hrs local time on September 9 and affected the terminal’s operating systems. The operator said it immediately isolated the affected systems as a precaution, resulting in the temporary suspension of container terminal operations while recovery efforts began.

The disruption is significant given PTP’s central role in global container networks. The wider Johor port complex, which includes PTP and Johor port’s container terminal at Pasir Gudang, handled a record 15.1m teu in 2025. More than 14m teu moved through PTP alone, underlining its importance as a significant transhipment hub and a key node in the Gemini Cooperation network of Maersk and Hapag-Lloyd.

In an update issued on September 10, PTP said it had begun a controlled resumption of container terminal operations following restoration of the affected system. The terminal said recovery measures would be implemented progressively and that details had been communicated to relevant stakeholders.

As part of the interim recovery plan, PTP introduced manual gate-in processing for laden and empty export containers, including free zone inter-terminal transfers, from 1930 hrs local time on September 10.

“Details of the resumption have been communicated to the relevant stakeholders and will be implemented progressively,” added PTP.

A spokesperson for Maersk told Lloyd’s List that it was working closely with PTP and actively managing the operational impact of the incident.

“While some vessels may experience delays, recovery efforts are progressing well. Our priority is to minimise disruption to customers and support the continued normalisation of operations and supply chains. We are closely monitoring the situation and working to inform customers of any impact on cargo movements and mitigate it where possible,” they added.

Lloyd’s List Intelligence vessel tracking suggests the disruption has caused limited operational impact so far, with most scheduled containership arrivals and departures continuing without significant delays. However, the 15,226 teu Maersk Hanoi (IMO: 9784295), sailing to Tanjung Pelepas from Pointe Noire, deviated from its route for around 10 hours on September 10 while transiting the Strait of Malacca before resuming its voyage to the Malaysian hub.

As of 1100 hrs UK time on Thursday, Lloyd’s List Intelligence vessel tracking also showed no significant queues outside the port and no containerships waiting at anchor.

The incident at PTP is the latest reminder of the maritime sector’s growing exposure to cyber risk as ports become increasingly dependent on digital systems for vessel scheduling, container tracking, gate operations and yard planning.

Cyber attacks have become an increasingly familiar threat across container shipping and logistics, with industry experts warning that disruptions to critical systems can rapidly cascade through wider supply chains. The sector’s watershed moment came in 2017 when the NotPetya malware attack paralysed Maersk’s global operations, while other big liner operators including CMA CGM, Cosco and MSC-linked businesses have all suffered significant cyber breaches in subsequent years.

Ports have also become targets, with attacks disrupting operations in South Africa, Australia and, more recently the port of Nagoya in Japan. As terminal operators become more reliant on integrated operating systems, concerns are growing that cyber incidents can increasingly translate into physical disruption to cargo flows and supply chain performance.

Any interruption at PTP is likely to attract close attention from carriers, shippers and cargo owners given the terminal’s scale and its role as an important regional transhipment hub connecting Asia with Europe, North America and the Middle East.

PTP said it continues to take all necessary measures to safeguard its systems and operations and further updates would be provided soon.