The illusion that a vessel is safe simply because it is isolated in the ocean has been definitively shattered. A modern ship is effectively a floating data center. Automation has opened vessels to cyber threats capable not only of disrupting systems, but also of physically immobilizing a ship.

The scale of the problem has already become global:

• One in three maritime transport professionals is at risk. According to DNV Maritime Cyber Priority, 31% of professionals experienced cyberattacks over the past year, compared with 17% over the previous five years.
• A vessel’s downtime ultimately increases the cost of goods for consumers. The average ransom demand in ransomware attacks targeting the logistics sector exceeds $3 million, while losses caused by downtime can reach tens of millions of dollars.
• Spoofing has become a new instrument of “war at sea.” GPS jamming and signal spoofing in conflict zones can result in incorrect coordinates, course deviations, and navigation failures.

The Main Vulnerability: IT and OT Integration

Corporate information networks (IT) and operational technology (OT) systems controlling engines and navigation were integrated to enable remote maintenance.

As a result, a phishing email received through a vessel’s Wi-Fi network or an infected USB drive used by an engineer can become an entry point into critical systems, including steering and control systems.

At sea, this creates a risk of accidents, collisions, and fuel spills.

According to Inmarsat Maritime, the industry is transitioning toward mandatory compliance with international requirements:

• IMO MSC.428(98): cyber-risk management has been incorporated into the Ship Safety Management System.
• IACS UR E26/E27: protection of IT and OT systems is now mandatory at the vessel design and construction stage.

Digital resilience is now an integral part of navigational safety.

Ignoring cybersecurity means risking the loss of insurance coverage, restrictions on access to ports, and even the loss of the vessel itself.

The world is rapidly changing the rules. Ten years ago, maritime cybersecurity was barely discussed. Today, it has become one of the key areas of daily operations across the entire maritime industry.

The digital anchor may be invisible, but its failure can be more dangerous than the strongest storm.