Legacy Acquisition System Exposes Maersk to Data Theft and Extortion

Written by AI from the linked story. Not reviewed by an editor. How this works

Hackers breached a legacy IT system inherited from LF Logistics, a company previously acquired by Maersk, stealing an alleged 100GB of sensitive logistics data including driver records, administrative credentials, and device identifiers. The root failure lies in inadequate security governance over acquired assets — systems brought in through mergers and acquisitions often retain outdated configurations, unpatched software, and stale privileged accounts that fall outside the acquiring company's standard security controls. The presence of 33 administrative accounts and plaintext or recoverable passwords in the stolen data suggests these legacy systems were never properly hardened or integrated into Maersk's identity governance program. This incident matters because attackers increasingly target the weakest link in a corporate portfolio, and legacy acquisition systems represent a predictable blind spot that threat actors actively exploit.