Ransomware stops container handling at the Port of Nagoya

Started

2023-07-04 (4 July 2023)

Ended

2023-07-06 (6 July 2023)

Status

ended

Type

Cyber incident

Severity

2 Moderate

Scope

port

Chokepoints

None

Ports

Nagoya

Lanes

None

Countries

Japan

Confidence

high: The timeline, the cause and the restart times come from the incident report published by the Nagoya Harbor Transportation Association, with consistent reporting by two technology outlets.

First reported

2023-07-05 (5 July 2023)

• Severity basis: Port wide stoppage of 24 hours to 7 days; container work stopped at every Nagoya terminal from 2023-07-04 until 2023-07-06.

1. 2023-07-04The terminal system stops at about 06:30. A ransom note prints at about 07:30, servers cannot restart, and by about 14:00 the physical and virtual servers are found encrypted. The police cyber attack unit is notified. [s1]
2. 2023-07-05The association states publicly that the cause is a ransomware infection and sets a target of restarting terminal work on the morning of 2023-07-06. A virus is then found in backup data, delaying restoration. [s1] [s2]
3. 2023-07-06Backup restoration finishes at about 07:15, a network fault is cleared at about 14:15, and terminals restart from 15:00, with the last terminals resuming at 18:15. [s1] [s3]

No corrections to this record as of 2026-09-16 (16 September 2026).

1. [s1] Nagoya Harbor Transportation Association, NUTS システム障害の経緯報告, published 2023-07-26 (26 July 2023), accessed 2026-09-15. Archived copy. (official)
2. [s2] The Record, Major Japanese port suspends operation following ransomware attack, published 2023-07-05 (5 July 2023), accessed 2026-09-15. Archived copy. (press)
3. [s3] The Register, LockBit ransomware infection hits Japan's top cargo port, published 2023-07-06 (6 July 2023), accessed 2026-09-15. Archived copy. (press)

The address of this record is permanent and a correction is always logged on this page, so a citation names the version you read. Add the date you accessed it.

Plain text

World Freight Monitor. "Ransomware stops container handling at the Port of Nagoya." Last updated 2026-09-16 (16 September 2026). https://worldfreightmonitor.com/events/2023/ransomware-attack-nagoya-port-2023/

APA

World Freight Monitor. (2026). Ransomware stops container handling at the Port of Nagoya. World Freight Monitor. https://worldfreightmonitor.com/events/2023/ransomware-attack-nagoya-port-2023/

BibTeX

@misc{wfm_ransomware_attack_nagoya_port_2023,
  author = {{World Freight Monitor}},
  title = {Ransomware stops container handling at the Port of Nagoya},
  year = {2026},
  note = {Last updated 2026-09-16},
  url = {https://worldfreightmonitor.com/events/2023/ransomware-attack-nagoya-port-2023/}
}