Ransomware Attack Halts Operations at Malaysia’s Port of Tanjung Pelepas

Malaysia's Port of Tanjung Pelepas came offline late on September 9 when a cybersecurity incident disrupted terminal operations. Port officials detected the breach at 2334 local time and suspended systems to contain it. A phased restart began the following morning.

Tanjung Pelepas is one of the largest container transhipment hubs in the world, processing around 14 million TEU in 2025. The port sits at the southern tip of the Malay Peninsula, just inside the Strait of Malacca. It is a central relay point for the Gemini Cooperation between Maersk and Hapag-Lloyd across Asia-Europe and transpacific strings.

The overnight shutdown caused delays across multiple vessel strings passing through. Shippers began looking for alternatives, though capacity at nearby hubs was tight. Kuehne+Nagel issued an advisory to customers warning of delays affecting transhipment cargo routed through PTP.

Operations resumed on September 10. The port confirmed systems were restored and cargo handling was returning to normal schedule, but the backlog from the overnight halt carried over into the following days. Ransomware was confirmed as the attack vector.

PTP's size and position in the Strait of Malacca mean even a short outage ripples through vessel schedules for several days. The incident follows a pattern of ransomware groups targeting major port operators, where system lockouts translate directly into vessel delays and cargo backlogs at scale.