Cyber Incident Victim: Microlise
Date:
Oct 2024
Location:
United Kingdom
Summary
A cyber attack targeting transport technology provider Microlise disrupted third-party delivery tracking systems used by DHL, causing global operational impacts for partnered retailers. The incident eliminated real-time visibility into shipment progress, though deliveries continued as scheduled with alternative manual notifications and interim 15-minute update intervals replacing live tracking. While DHL confirmed its own infrastructure remained unaffected, precautionary safeguards were implemented alongside contingency measures to maintain service levels during system recovery efforts. The supplier worked to isolate and restore compromised systems while DHL maintained direct communication with affected customers regarding resolution progress.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On October 31, 2024, a cyber incident disrupted DHL's delivery tracking systems globally after impacting Microlise, a third-party transport technology provider. Nisa, a convenience retail group reliant on DHL for logistics, alerted its retailers that morning that the attack had rendered DHL's tracking solution inoperable, eliminating visibility into delivery progress. While initial reports suggested global disruption across DHL, subsequent assessments indicated the operational impact was more limited in scope than initially claimed. The incident specifically affected Microlise's systems, which DHL Supply Chain UK utilized for tracking, but did not compromise any DHL-owned infrastructure. Despite the loss of real-time tracking capabilities, DHL maintained delivery operations without schedule disruptions, relying on drivers and customer service teams to manually communicate delays directly to retailers, albeit with potential timing delays compared to automated systems.
DHL implemented contingency measures, including a temporary system providing retailers with updated estimated delivery arrival times at 15-minute intervals. The company confirmed the incident was isolated to its UK Supply Chain division’s use of Microlise services and did not affect other DHL Group operations, including Express, eCommerce, or Global Forwarding. Microlise initiated efforts to isolate compromised systems and restore full functionality, though no timeline for resolution was provided. Nisa informed retailers that delivery status updates remained unavailable until Microlise completed system recovery. DHL emphasized ongoing coordination with Microlise and adherence to safeguarding protocols while maintaining customer service levels through manual workarounds. The company’s public statement clarified the attack’s confinement to Microlise’s environment and reiterated the absence of broader operational consequences beyond the tracking outage.