France
FRA
CMA CGM cyberattack takes e‑business offline; bookings switched to manual/INTTRA
On 28 September 2020, CMA CGM reported a malware/ransomware incident impacting peripheral servers and shut off external access to IT applications, taking e‑business services offline. The carrier directed customers to use INTTRA or manual booking processes while systems were restored. Reuters later reported online services were resumed on 12 October, and the company suspected a data breach.
55
Estimated severity
55 / 100
90
Source reliability
90 / 100
Approximate Date
28/09/2020
Targeted Company
CMA CGM
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
France
Affected countries
France
Impacted regions
No information
Operational Impact
Duration
14 days
Financial impact (USD M)
No information
Impact types
Service unavailabilityOrder processing disruptionOperational disruption
Affected sectors
Transportation
Affected departments
Information Technology
Attack Profile
Attack types
RansomwareMalwareData breach
Attributed threat actors
No information
Sources
Incident Sources
cmacgm-group.comhttps://www.cmacgm-group.com/en/news-media/global-it-update-09-29-2020reuters.comhttps://www.reuters.com/world/americas/container-shipping-group-cma-cgm-resumes-online-services-after-cyber-attack-2020-10-12supplychaindive.comhttps://www.supplychaindive.com/news/cma-cgm-ocean-shipping-malware-cyber-attack-information-technology/585978supplychaindive.comhttps://www.supplychaindive.com/news/cma-cgm-e-commerce-recovered-following-cyberattack-ocean-shipping/586817navigateresponse.comhttps://navigateresponse.com/wp-content/uploads/2022/02/Final_Presentation.pdf