CSIDB logo
Incident

Jawaharlal Nehru Container Terminal

Incident posture

Attack window
Jan 2022
Location
India
Status
Historical
CIA posture
Available to members
Updated
2025-10-22 00:00

Linked entities

Victim
Jawaharlal Nehru Container Terminal
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
Jan 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A suspected cyber attack targeting the management information system severely disrupted operations at the Jawaharlal Nehru Container Terminal, forcing the state-owned facility to divert at least one container vessel to other terminals within the port complex. The attack rendered critical digital systems inoperable, halting vessel berthing due to an inability to process required documentation, with restoration estimates suggesting several days of downtime. The incident compounded existing operational challenges for the terminal, which had faced declining capacity utilization and competitive pressures prior to the outage.

Motives

Detailed motive labels are available to members.

2 motives

TTPs

Detailed technique labels are available to members.

5 techniques

Description

A suspected cyber attack targeting the Management Information System (MIS) severely disrupted operations at the state-owned Jawaharlal Nehru Container Terminal (JNPCT) beginning February 1, 2022. The attack rendered the terminal's digital systems inoperable, forcing JNPCT to divert at least one container vessel to other terminals within Jawaharlal Nehru Port, India's busiest state-owned container gateway. Terminal officials confirmed the MIS outage prevented standard operations, particularly the digital documentation required for vessel berthing, leaving no visibility into restoration timelines. Shipping industry sources directly attributed the disruption to a "major cyber-attack," estimating recovery would take a minimum of three to four days. The complete system failure halted JNPCT's ability to accept vessels alongside berths, as all operational processes relied on the compromised digital infrastructure.

The incident compounded existing operational challenges for JNPCT, which had experienced declining container volumes since FY2018 due to equipment shortages and competition from newer, privately operated terminals at JN Port. With an annual capacity of 1.35 million TEUs, JNPCT's utilization had plummeted from over 100% in FY17 to below 50% prior to the attack. The terminal was already slated for privatization under India's National Monetisation Pipeline, further complicating its operational landscape. While MIS personnel worked to restore systems, JNPCT officials prepared to divert additional vessels based on technical assessments, though no specific containment measures or forensic findings were disclosed. The prolonged outage risked exacerbating financial and reputational damage to the terminal amid its preexisting struggles to retain shipping line clients.

Sources

Sources available to members: 1 source.

CSIDB