November 11, 2026 — Global shipping and logistics giant A.P. Moller-Maersk (Maersk) published an important security notice on its official website, confirming that the company had experienced an IT security incident.

For many freight forwarders and foreign trade veterans who lived through the 2017 global outage, the words "Maersk" and "security incident" inevitably trigger alarm: Will the booking system go down? Are my bills of lading and cargo tracking data safe? Can API/EDI interfaces still send messages normally?

Don't panic. Based on Maersk's latest official notice, here are the key points that matter most to foreign trade and freight forwarding professionals:

1. Is business affected? Booking and shipping continue as normal

This is the bottom line everyone cares about most. According to Maersk's current investigation and assessment, daily shipments will not be disrupted:

  • Platforms operating normally: Maersk explicitly stated that no interruption to customers' daily business operations is expected. Customers can still log in to the Maersk platform as usual to book space, make inquiries and manage cargo.
  • System connections normal: Many large freight forwarders and foreign trade companies connect directly with Maersk via API or EDI. The company confirmed that there is currently no indication that these interfaces have been affected.

2. What went wrong? A "local legacy system" was breached

If business is unaffected, where did the hackers strike?

Maersk disclosed that the incident involved unauthorized access and data extraction, but the compromised system was not Maersk's core backbone network — it was a local legacy system left over from a previous acquisition.

  • Risk contained: After detecting the issue, Maersk's cybersecurity team immediately locked down the system and launched a full investigation. The attack has now been fully isolated within that local legacy system and has not spread to other core Maersk systems.
  • No sensitive data leaked: Preliminary investigation results show strong indications that no sensitive data was leaked. Commercial secrets, customer information and freight rate data are currently safe.

3. Painful memories: Why are freight forwarders so sensitive to a Maersk hack?

Any sign of trouble puts the entire industry on edge because the historic "NotPetya" virus disaster of June 2017 left deep psychological scars on foreign trade and freight forwarding professionals.

Screen-lock image from the 2017 "NotPetya" outbreak (source: online materials)
  • Global outage within minutes: At the time, Maersk handled about one-fifth of the world's container shipping volume. On June 27, 2017, a computer in Maersk's Ukraine office was infected by a virus through an update to local tax software. Within minutes, the virus swept through Maersk's global intranet. Tens of thousands of computer screens went black and locked, the booking system collapsed entirely, 17 core container terminals worldwide ground to a halt, container trucks queued for kilometers outside terminals, and direct economic losses reached USD 250 million to 300 million.
  • Saved by a powered-down server in Africa: Most critically, the virus wiped out almost all of Maersk's global domain controller data, making direct system recovery impossible. While desperately checking hundreds of sites worldwide, engineers unexpectedly found that a remote office in Ghana, West Africa, happened to be experiencing a local power outage when the virus struck, leaving its server offline and preserving the only complete data copy. Maersk then dispatched employees to carry hard drives on flights relayed across countries back to the UK, spending about 10 days rebuilding more than 4,000 servers and 45,000 computers before global cargo flows could resume.

After that darkest hour, Maersk rebuilt its network isolation and defense systems at great expense. That is why in today's incident (November 11, 2026), even though hackers breached a legacy system from an acquisition, they could not penetrate deeply as they did back then, and core booking operations achieved "zero interruption."

4. Caution for foreign trade and freight forwarding: Beware of phishing scams

Although systems have not gone down, security incidents at shipping lines are often accompanied by a surge in fraud targeting the foreign trade and freight forwarding industry. Maersk also issued a special warning to global customers in its notice:

"Please be highly vigilant about any unexpected communications claiming to be related to this matter, and be sure to verify through your usual Maersk contacts."

In your daily work, be sure to take the following three precautions:

  • Beware of "account anomaly" notices: If you receive emails claiming to be from Maersk customer service asking you to "re-verify account passwords due to system security upgrades" or "click a link to rebind API keys," do not click them.
  • Guard against "change of bank account" fraud: Before paying ocean freight or destination port charges, finance and documentation staff who receive any email notice about "Maersk temporarily changing its receiving bank account" must verify by phone or WeChat with a familiar frontline sales representative or customer service contact.
  • Rely only on official channels: For all system status updates, refer to Maersk's official website notices or replies from your dedicated customer service contact. Do not trust unverified screenshots or unfamiliar links in WeChat groups.

Follow-up and reminders

From the devastating NotPetya attack to now being able to quickly confine an attack within a local legacy system and ensure zero interruption to global customer bookings, Maersk's emergency response speed is indeed far beyond what it was.

Maersk's investigation is still ongoing. If new findings affecting specific customer interests emerge, the company promises to notify relevant parties as soon as possible. Huodai Tianyan will continue to monitor the latest developments.

Please forward this notice and remind colleagues to be extra careful when checking emails recently.

Discussion is heating up.

If the group is full, add the group owner on WeChat: bryce006. Note your company name to be invited into the group.

Compiled by the Huodai Tianyan platform.

Please credit the source when reposting: Huodai Tianyan.

🗺️ Expand your cargo sources and find business opportunities: Foreign trade and logistics professionals are advised to visit the [Huodai Tianyan Map - China Foreign Trade Industrial Belts] section. With this feature, you can grasp the layout of China's leading foreign trade industries with one click.

Huodai Tianyan AI: search freight forwarders, find shipping lines, check port charges.