Cyberattack Disrupts Operations at Malaysia’s Port of Tanjung Pelepas A cybersecurity incident at the Port of Tanjung Pelepas (PTP), one of the world’s largest container transshipment hubs, forced a temporary suspension of terminal operations before a phased restart began on September 10. The attack disrupted critical operating systems, halting container handling at the Malaysian port, which handled over 14 million TEUs in 2025 and serves as a key hub for Maersk and Hapag-Lloyd’s Gemini Cooperation network. PTP confirmed the restoration of affected systems and a controlled resumption of operations, though details on the nature of the attack and its origin remain undisclosed. The incident follows a pattern of escalating cyber threats targeting global maritime infrastructure, including previous attacks on Maersk, CMA CGM, Cosco, and major ports worldwide. The disruption underscores growing concerns over maritime cyber resilience, particularly as ports adopt emerging technologies. The International Association of Ports and Harbors (IAPH) has recently released cybersecurity guidelines to address vulnerabilities in the sector. Meanwhile, DP World Australia also faced a similar cyberattack, further highlighting the industry’s susceptibility to digital threats.

In March 2022, Hapag-Lloyd, a global shipping and container transportation company headquartered in Hamburg, Germany, fell victim to a spear-phishing attack. Cybercriminals created a malicious replica of the company’s official website and distributed hyperlinks via email to unsuspecting users. When employees or customers clicked these links and entered their login credentials, the attackers harvested their personal data, including usernames, passwords, and potentially other sensitive information.The company’s IT security team detected the fraudulent website and immediately issued warnings to users, advising them to avoid clicking email links and instead manually type the website URL to prevent further data theft. While the attack primarily targeted user credentials, the compromise of personal data posed risks of follow-on fraud, identity theft, or unauthorized access to corporate systems. Hapag-Lloyd took mitigative steps to contain the incident, but the breach highlighted vulnerabilities in user awareness and email-based threat vectors.The attack did not result in large-scale financial losses, operational disruptions, or systemic damage to the company’s infrastructure. However, the theft of personal data—even if limited to login credentials—exposed customers and employees to potential downstream risks, including phishing escalation or credential-stuffing attacks on other platforms.