2023 — DP World, Dubai, UAE, 108,000 Employees, NAICS 483111…
Data compromised
Personal, Sensitive Personal
Technical writeup
DP World, Dubai, UAE, 108,000 Employees, NAICS 483111 (Deep Sea, Freight Transportation), had a cyberattack Nov 10, 2023. DP World disconnected its network affecting Australian operations for three days, resuming operations Nov 13, 2023 Ports affected: Sydney, Melbourne, Brisbane, and Fremantle. DP World manages almost 40% of goods flowing in and out of Australia and the company needed a week to clear a backlog of more than 30,000 freight containers. IT Team detected unauthorized access to the Australian corporate network. Data Exfiltration: Some of the impacted data includes the personal information of current and previous employees of DP World Australia: telephone number, address, driver’s licenses. The incident was particularly linked to an unpatched vulnerability known as CitrixBleed. Australian Security Center, CISA, and FBI warned that Russian hacker group LockBit 3.0 thought to be exploiting vulnerability/
Root cause
Hacking: Exploit vuln
References
- https://infra.economictimes.indiatimes.com/news/ports-shipping/australia-ports-firm-fights-to-restore-operations-after-cyber-incident/105167314
- https://www.bleepingcomputer.com/news/security/dp-world-cyberattack-blocks-thousands-of-containers-in-ports/,
- https://www.linkedin.com/pulse/case-study-dp-world-cyber-incident-phoenix-technocyber-e5iwf/
- https://maritime-executive.com/article/widely-exploited-vulnerability-likely-cause-of-dp-world-australia-s-attack#:~:text=They%20warned%20that%20the%20notorious,steps%20to%20address%20the%20issue.