Every connection a company makes is also an entry point for someone else.

Most owners know their own defences well. Far fewer can say what sits behind the access their suppliers hold on their behalf. Convenience builds that reach quietly and nobody notices until it is tested.

Leaders should know who else holds the key before an outsider finds out first.

It leads straight into the insight: access that lives outside your own walls, with no mention of any one incident.

A software supplier sits quietly inside the daily business of many shipping companies. When that supplier is hit, the damage does not stop at its own front door.

That is the picture Cydome drew in its 14 October warning. An extortion group called n0n claimed on 12 October to have breached data linked to CyberLogitec and threatened to publish it on 19 October. Cydome counts 37 maritime organisations in the claims, including Ocean Network Express, CULines and Polaris Shipping. Ten of them, about 27%, are shipping companies. Most are based in Asia-Pacific.

Cydome assesses that a shared environment associated with CyberLogitec may have been compromised. The source of the breach and the extent of any exposure remain unconfirmed. The named organisations have not been shown to have suffered breaches. An attacker’s claim is not a finding.

The reason this reaches every boardroom is simple. The industry has spent years hardening vessels and onboard networks. Far less attention has gone to the commercial and operational software that shore teams use every day, and to the people who hold the logins for it.

That gap is the real exposure. Many owners and managers cannot say which suppliers hold access to their systems, which support channels share credentials or which platforms sit in a common environment with competitors. One compromised provider can put commercial and operational data from many companies at risk at once. The owner has no say in how that supplier protects itself but carries the consequences.

Cydome advises reviewing vendor permissions, assessing supplier risk and examining credentials passed through support channels. None of that needs a breach to justify it.

With 19 October close, every operator linked to a supplier like this has a short window to find out exactly where it stands.

The market standard is three-way matching: purchase order, invoice, delivery note. In maritime shipping, that delivery note often gets signed at berth as the vessel prepares to depart, acknowledging that goods arrived rather than that they matched the order.

The stores inventory happens days later at sea. Three lines are short, the invoice has cleared, and AP is chasing a credit note from a supplier with a signed receipt.

Marcura Procure to Pay adds the vessel's confirmation as a fourth source. Lines that agree clear automatically; the invoice cannot clear until the vessel confirms receipt, so short lines surface before the payment leaves.

» See how invoice matching works in Procure to Pay. «

Anglo-Eastern and CMB.TECH bring ammonia-powered bulk carrier into service
The 210,000 dwt Mineral Europa has begun its maiden voyage, putting ammonia propulsion to the test in commercial bulk shipping.

SmartSea tackles crew transfer delays with integrated digital platforms
SmartSea links crew travel updates and digital access checks to help ship managers prevent delays before they disrupt crew changes.

Marlink upgrades Fugro vessel to Iridium GMDSS using existing terminal
Marlink adds global distress and safety communications to an existing satellite terminal, avoiding a full hardware replacement.

90POE uses AI to catch passport errors before crew changes fail
90POE’s AI checks passport details against crew records to catch errors before they disrupt travel, immigration clearance or crew changes.

Fleet Management expands Kumiai Navigation fleet to five vessels
Fleet Management adds a new LPG and ammonia carrier to its Kumiai Navigation portfolio, with energy-saving technologies designed to improve efficiency.

Modern Terminals and CLPe target 2030 emissions goal with port electrification plan
Modern Terminals and CLPe are assessing shore power, electric equipment and battery-swapping infrastructure to cut port emissions by 2030.

» Secure your Delegate Pass «

» Register your Interest «

Shipowners can combine cloud and edge computing to balance real-time onboard operations, connectivity costs and fleet-wide data visibility.