The United Nations International Maritime Organisation (UN IMO) disclosed a security breach over the weekend that it described as a sophisticated cyber-attack against its IT systems. The issue was discovered, which also affected other websites and web-based services used by the IMO. It was revealed that email systems, its virtual conferencing system, and other internal and external collaboration platforms had not been impacted. Uncertainty exists regarding the IMO's vulnerability to ransomware, website defacement, or watering hole attacks.

In September 2020, the United Nations International Maritime Organization (UN IMO), headquartered in London, fell victim to a cyberattack targeting its IT infrastructure. The incident resulted in a 48-hour outage of the organization’s website and intranet, severely disrupting internal communications and public-facing services. While the exact nature of the attack (e.g., malware, DDoS, or targeted intrusion) was not disclosed, the prolonged downtime suggests a significant operational disruption, potentially affecting maritime safety protocols, regulatory compliance, and global shipping coordination. As a specialized UN agency responsible for maritime security, environmental regulations, and shipping standards, the IMO’s systems are critical to international trade and safety. The attack did not publicly confirm data breaches or ransomware demands, but the service interruption alone—impacting a high-profile intergovernmental body—raises concerns about cyber resilience in global governance. The lack of transparency regarding the attack vector or compromised data leaves uncertainties about broader implications, though the operational halt underscores vulnerabilities in sectors reliant on digital infrastructure.

In November 2018, the Yuk Tung vessel (operating under the fake name Maika) executed a sophisticated AIS spoofing attack, impersonating the Hika—a Comoros-flagged sister ship with an identical IMO number but located over 7,000 km away. The deception involved falsifying the vessel’s identity, path, and destination, following a suspicious ship-to-ship transfer with the Ocean Explorer in October. This attack exploited maritime tracking systems, enabling the Yuk Tung to evade regulatory oversight, potentially facilitating illicit activities (e.g., sanctions evasion, smuggling, or unauthorized cargo transfers). The incident demonstrated a highly coordinated cyber-physical deception, undermining global maritime security protocols. While no direct data breach or financial theft was reported, the attack compromised the integrity of the IMO’s vessel identification framework, eroding trust in Automatic Identification System (AIS) data—a critical component for navigation safety, port authorities, and law enforcement. The long-term impact includes increased risks of undetected illegal maritime operations, regulatory bypass, and potential cascading effects on global trade security.