United States
USA
Expeditors cyberattack causes logistics shutdown and customer delays
On 20/02/2022, Expeditors determined it was the target of a cyberattack and shut down most operating systems globally, halting freight arrangements, customs processing and distribution. Operations were severely constrained for roughly three weeks. The company later reported $47M in extra charges and $18M in investigation and shipping‑related claims; longtime customer IROBOT sued over delays and refunds tied to the outage.
78
Estimated severity
78 / 100
95
Source reliability
95 / 100
Approximate Date
20/02/2022
Targeted Company
EXPEDITORS INTERNATIONAL OF WASHINGTON
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
IROBOT (Logistics provider)
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United States
Affected countries
United States
Impacted regions
No information
Operational Impact
Duration
21 days
Financial impact (USD M)
$65M
Impact types
Logistics delayOrder fulfillment or delivery disruptionOperational disruptionShipping disruption
Affected sectors
Logistics & WarehousingTransportation
Affected departments
Information TechnologyLogistics & Transportation
Attack Profile
Attack types
Ransomware
Attributed threat actors
No information
Sources
Incident Sources
investor.expeditors.comhttps://investor.expeditors.com/press-releases/2022/02-21-2022-032617120freightwaves.comhttps://www.freightwaves.com/news/expeditors-outlines-severity-of-cyberattack-partially-resumes-operationsthestack.technologyhttps://www.thestack.technology/expeditors-ransomware-costs-freight-forwardingsupplychainbrain.comhttps://www.supplychainbrain.com/articles/37153-expeditors-sued-by-longtime-customer-over-delays-caused-by-2022-cyberattacksecurityaffairs.comhttps://securityaffairs.com/128268/hacking/expeditors-international-cyber-attack.html