NYK alerts on data breach in bunker fuel procurement system

Japanese shipping major NYK on Thursday (9 April) posted a notice that a marine fuel procurement system that it used was accessed without authorisation by a third party. 

As a result, certain data — including personal information — was accessed and exfiltrated.

The company said it detected the unauthorised access on the afternoon of 24 March. 

“It was determined that certain data, including personal information, may have been taken from the system. Upon discovering the breach, we immediately isolated the system from the network and suspended its use,” the company said in the notice.

Subsequently, NYK established an internal task force to investigate and address the incident.

The system was restored on 27 March 27 and on the same day, the company submitted a preliminary report to the Personal Information Protection Commission of Japan and other relevant authorities in the applicable jurisdictions as necessary. 

In addition, we reported the Incident to the police on 31 March. 

“At this stage, there is no evidence of data encryption or any financial demands in connection with the Incident,” it added. 

At the time, no secondary damage resulting from the incident had been confirmed.

“The NYK Group takes the incident very seriously and is committed to further strengthening its security measures and management framework. We will continue to monitor the situation,” it added.

Photo credit: Claudio Schwarz on Unsplash
Published: 13 April, 2026