// INCIDENT · 2021-07 · LOGISTICS / STATE-OWNED ENTERPRISE

Transnet.

Ransomware. Force majeure declared at container terminals in Durban, Ngqura, Port Elizabeth and Cape Town; manual cargo handling caused long delays until systems were restored in stages.

← All tracked breaches
Date2021-07
SectorLogistics / state-owned enterprise
TypeRansomware
RecordsRansom note claimed about 1 TB of files encrypted; primarily operational disruption
AttackerLinked by CrowdStrike to the Death Kitty / HelloKitty ransomware family (per Bloomberg)
StatusConfirmed by Transnet (force majeure notice)

How the attack happened.

Ransomware attack on IT systems, including the container terminal operating system

Impact.

Force majeure declared at container terminals in Durban, Ngqura, Port Elizabeth and Cape Town; manual cargo handling caused long delays until systems were restored in stages.

Primary sources.

Would your business survive this happening to you?

Most SA SMBs do not have the detection or incident-response capability to answer that honestly. We can help you work out where your real gaps are.

Talk to us → See our cybersecurity services