283 Ransomware Attacks Cripple Global Shipping in 2025

Cyble’s Transport & Logistics Threat Landscape Report 2025 reveals an alarming surge in cyberattacks targeting the backbone of global commerce. The sector experienced 283 ransomware attacks in 2025—more than the combined totals from 2023 and 2024—alongside massive data breaches and sophisticated cargo theft operations.

The New Battlefield

Four ransomware groups dominated the threat landscape, accounting for 57% of all attacks. CL0P led with 68 incidents, followed by Qilin with 43, demonstrating how a small number of sophisticated operations can paralyze global supply chains. Land transport bore the brunt of the assault, representing nearly three-quarters of all ransomware activity, with logistics and freight services emerging as prime targets.

Millions of Records Compromised

The human cost was staggering. A single breach exposed approximately 6 million Qantas customer records, while another incident involved over 7 million user records from a logistics platform. Airlines, government agencies, and supply chain firms found themselves repeatedly targeted due to the valuable personal and operational data they manage.

Digital Threats, Physical Consequences

Attackers have evolved beyond purely digital disruption. The report documents emerging cyber-enabled cargo theft tactics in which criminals exploit GPS weaknesses and operational technology vulnerabilities to facilitate physical theft. Underground markets flourished, with threat actors selling network access to transport organizations—creating entry points for ransomware deployment and espionage.

Critical zero-day vulnerabilities in widely deployed enterprise technologies from Microsoft, Cisco, Fortinet, and others enabled attackers to gain rapid network access. Meanwhile, geopolitical hacktivism surged, with over 40,000 data leak incidents impacting more than 44,000 domains globally, including a destructive attack on a Russian airline that caused widespread flight cancellations.

The convergence of digital and physical threats signals a dangerous new era for global logistics security.

Author