INCIDENT REPORT · CP-2023-006
DP World Australia port cyber incident
L3 · ELEVATEDCONFIRMED
Port operator DP World Australia detected a cyber incident on 10 November 2023 and cut its network connection. Land-side operations at its four container terminals were suspended.
- Incident ID
- CP-2023-006
- Incident date
- 10 NOV 2023
- Detection date
- 10 NOV 2023
- Affected countries
- Australia
- Plotted location
- Sydney, Australia (Affected organization headquarters (DP World Australia))
- Threat classification
- Level 3 — ELEVATED
- Classification rationale
- Described by Australia's National Cyber Security Coordinator as nationally significant; disrupted major port infrastructure for three days.
- Attack type
- Infrastructure Compromise
- Nature
- Malicious activity
- Attack vector
- Not publicly documented
- Sectors
- Logistics, Transportation
- Critical infrastructure
- Yes
- Organizations affected
- DP World Australia
- Operational consequences
- Operations at Sydney, Melbourne, Brisbane and Fremantle were halted until 13 November. The backlog exceeded 30,000 containers, and the company later said employees' personal data had been accessed.
- Estimated financial impact
- No reliably documented figure
- Attribution (as stated)
- No official attribution recorded
SOURCE REFERENCES
- [1] Australian ports operator recovering after major cyber incidentThe Record · therecord.media
- [2] DP World Australia resumes terminal ops after 'serious' cyber incidentThe Maritime Executive · maritime-executive.com
RECORD CREATED 14 NOV 2026 · LAST UPDATED 14 NOV 2026 · Threat levels are editorial assessments, not official government ratings.