Maersk confirms data breach as WhiteArmor ransomware demands $5 million

Maersk suffered a data breach and $5 million ransomware demand after attackers exploited a legacy system inherited through a corporate acquisition — a system that likely received less security scrutiny than core infrastructure. This highlights a persistent blind spot in M&A security: acquired assets often carry unknown vulnerabilities, outdated configurations, and insufficient monitoring that persist long after the deal closes. The exfiltration of 100GB of data before detection suggests the legacy system lacked adequate logging, network segmentation, or data loss prevention controls. Organizations that fail to integrate acquired systems into their security programs effectively expand their attack surface without expanding their defenses.