Microlise cyberattack disables fleet tracking and safety systems for customers

Microlise detected unauthorized activity on its network on 31 October 2024 and reported that a large portion of its transport-technology services became inactive. The disruption propagated to customer fleets: Serco prison transport vehicles lost location tracking, navigation and panic-alarm functionality and crews used contingency procedures, while some DHL Supply Chain vehicles lost tracking capability. Microlise progressively restored services over roughly two and a half weeks and later confirmed exfiltration of corporate data, but did not confirm the SafePay ransomware group's claim as the attack mechanism.