In June 2023, Lysander Shipping, a Denmark-based global shipping company, suffered a ransomware attack executed by the 8BASE cybercriminal group. The attackers employed a double extortion strategy, exfiltrating sensitive corporate data before encrypting the company’s systems. The stolen data included critical financial and operational documents such as invoices, internal records, bank statements, and financial files. The 8BASE group threatened to publicly leak the compromised data on July 3, 2023, unless a ransom was paid. The incident was publicly disclosed by RedPacket Security on June 26, 2023.The attack disrupted Lysander Shipping’s operations, risking financial losses, reputational damage, and potential regulatory penalties due to the exposure of confidential business and financial information. The breach also posed a broader threat to the company’s supply chain partners and clients, given the sensitivity of the leaked documents. While the article does not specify whether the ransom was paid or if the data was ultimately published, the attack underscored the vulnerability of maritime logistics firms to targeted ransomware campaigns, particularly those leveraging data theft as leverage for extortion.