Cyber Incident Victim: Voyager Worldwide
Date:
Dec 2022
Location:
Norway
Summary
A maritime technology provider experienced a cyber attack leading to all systems being taken offline, disrupting services for over 1,000 shipping company clients globally. The organization engaged cybersecurity firm Mandiant to assist its internal response team in an ongoing investigation, with recovery timelines remaining fluid due to containment priorities. The incident impacted a company that itself offers cybersecurity solutions as part of its service portfolio.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 2 techniques |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Voyager Worldwide, a maritime technology company providing navigation services and solutions to over 1,000 shipping customers globally, experienced a cyber attack on or around December 2, 2022. The company took all systems offline immediately following the incident to contain the impact. Voyager publicly confirmed the attack on its website, characterizing it as an ongoing investigation and prioritizing containment efforts. The initial recovery timeline aimed to restore systems within the same week as the attack’s discovery, though Voyager cautioned that this timeframe could shift due to the complexity of the incident response process. The company engaged Mandiant, a cybersecurity firm specializing in incident response, to assist its internal team in investigating and mitigating the attack. Voyager’s operational disruption affected its suite of maritime navigation services, though the company did not specify which systems or customer functions were most impacted.
The cyber attack caused significant service interruptions across Voyager’s operations, halting access to its digital platforms for clients worldwide. Voyager’s public statement emphasized containment as the primary objective but did not disclose technical details about the attack vector, attacker identity, or data compromise. Notably, the incident affected a provider that markets its own cybersecurity and protection portfolio as part of its service offerings. No ransom demands, financial losses, or data exfiltration claims were cited in available reports. Recovery efforts remained underway with Mandiant’s support, focusing on restoring systems while maintaining safeguards against further compromise. The company maintained transparency about potential delays in full restoration, citing the dynamic nature of the investigation and containment requirements as factors influencing the resolution timeline.