DP World Australia Cyberattack (2023)
A computer intrusion that forced Australia's second-largest port operator to cut its terminals off from the internet for three days, leaving about 30,000 containers stuck in Sydney, Melbourne, Brisbane and Fremantle.
A container terminal can no longer run without its operating system: that system admits trucks at the gate, locates each box and drives the cranes. An intrusion that forces the operator to disconnect its systems therefore physically halts the flow, with no property damaged at all. For insurance, such an incident falls between policies: cargo insurance excludes delay, shippers' property policies see no physical damage, and the operator's cyber policy covers its own business interruption, not that of its customers. The marine market also often excludes cyberattacks through the CL380 clause. The case illustrates cyber supplier dependency: a single failure at a concentrated provider spreads to thousands of businesses that had no contractual tie to the insurer involved.
On Friday, November 10, 2023, DP World Australia detected an intrusion and disconnected its terminals in Sydney, Melbourne, Brisbane and Fremantle; about 30,000 containers stayed stuck until operations resumed on Monday, November 13 at 9 a.m., and the operator said it had received no ransom demand.
Follow the research
One letter a week. First, the week's underwriting note, when one is published: a dated, argued decision, signed by Paul Bernardski. Then what the observatory published on cyber risk, political risk and insurance. No account, no tracking.
No spam, one-click unsubscribe, no data ever sold.