Every item below is a publicly reported incident at a shipbuilder or defense supplier. None was a novel exploit โ they were exposed access, unpatched edge systems, and email compromise.
Ransomware hit CNC machines and briefly delayed frigate and LCS construction. Nearly 17,000 people were notified.
Hunters International claimed a breach at the DoD and DHS shipbuilder and published samples. Austal alerted the FBI and NCIS.
The LockBit group breached the prime contractor for the U.S. Coast Guardโs Offshore Patrol Cutter fleet.
Interlock hit NDC and its AMTEC subsidiary, exposing defense supply-chain data in a campaign called deliberately targeted.
The Qilin group exfiltrated ~1TB from Croatiaโs largest shipyard โ engineering drawings and internal business files published.
DEVMAN exfiltrated internal corporate data from the French shipbuilding group and published samples.
Cybersecurity is no longer an optional IT cost โ it is a strict condition of operating the yard and maintaining defense & maritime contracts.
The USCG Final Rule (90 FR 6298) took effect for U.S.-flagged vessels and MTSA facilities. By 16 July 2027, you must designate a Cybersecurity Officer in writing, complete an assessment, and have an approved Cybersecurity Plan.
CMMC is becoming a strict contract eligibility requirement across the DoD supply chain. Where CUI passes through design, engineering, or supplier systems, a valid CMMC assessment directly determines bid eligibility.
IACS member societies apply UR E26/E27 cyber resilience requirements to newbuilds contracted on or after 1 July 2024. For foreign-flagged tonnage in U.S. waters, USCG Port State Control inspects cyber risk management.
CTEM sits at the top as the unified decision layer. EASM, ICES, SAST, and TI feed into it continuously, leaving you with a ranked fix order and CAL 0โ5 proof.
โYou canโt protect assets you donโt know exist.โ
One seed domain in — every internet-facing asset across the yard, programs, and acquired entities mapped, validated, and priced in expected dollar loss.
โDonโt trust โfixedโ. Prove it.โ
The remediation loop run end-to-end — with an evidence grade on every closure, ready for a Coast Guard review, insurer, or primeโs assessment.
โThe costliest attack arrives as an ordinary email.โ
Account takeover and wire payment fraud watched in one console — the entry path behind most shipyard, logistics, and supplier ransomware.
โDelivered software is part of the ship • Know your adversary.โ
Source-level testing in the build pipeline for plant scheduling and embedded naval software, paired with active adversary profiling mapped to your sector.
The people who built the platform run the engagements — offense, threat intelligence, incident response, and OT security as one team on your site.
Shadow assets identified; exposed API keys, cloud-storage credentials, and forgotten dev/staging systems remediated first — reported to the board in expected-loss terms.
Minor flaws chained into privilege escalation, remote control of a connected production system, and a large-scale PII exposure path — blocked before an incident.
โThey went beyond listing assets — they singled out the vulnerabilities most likely to be exploited, with concrete guidance and re-verification after the fix.โ
— Security Team Lead, Global Heavy Manufacturer (North America)It starts with one domain. Run a free two-week assessment of the yardโs external surface, review the findings with our team, then decide with your own data. Non-destructive, read-only API, NDA available.