MMA Blog

Trucking Through Cyber Risk: Understanding cybersecurity for the transportation industry

According to the 2024 IBM X-Force Threat Intelligence Index, transportation was the eighth most attacked sector in 2023. Due to the widely connected nature of operations and even the vehicles within trucking, the sector is a highly valuable target for attackers. A white paper developed in partnership with Trimble and FreightWaves reveals 21% of trucking organizations surveyed have been directly affected by a cyberattack, emphasizing the critical need for robust cybersecurity for transportation.. As the industry continues to evolve and embrace technology, understanding and mitigating these cyber risks is essential for safeguarding not only individual companies but the integrity of the entire supply chain. Transportation is included as one of the sixteen sectors within critical infrastructure by CISA, The Cybersecurity and Infrastructure Security Agency.

Transportation is essential for a country’s economy and daily life. Since trucking is a key part of moving goods, any disruption can have a major impact on business, supply chains, and even people’s access to food and other necessities. This means trucking is targeted not only by those attackers that might be financially motivated, but nation-state threat actors. These actors are individuals or groups that are sponsored or directed by a government to conduct cyberattacks or espionage against other nations, organizations, or individuals. These attackers are well resourced, have different motivations, and are more sophisticated. This is a grave threat to trucking organizations.

Top exposures

Social engineering and phishing

Cybercriminals use sophisticated tactics to impersonate your company or even a client or vendor. An employee can be convinced to transfer funds to a malicious account or send loads to fraudulent locations.

Business interruption and system failure

With tight timelines in trucking, if your business falls victim to an attack that prevents access to critical data or systems necessary for daily operations, it could lead to significant costs for system recovery, potential ransomware expenses, and restoration efforts.

Vendor and third-party security

Trucking companies use third party software that can lead to disruptions if shutdown. Fleet management systems and electronic logging devices (ELDs) are crucial to the day-to-day operations. A cyberattack against these systems can result in serious interruptions or data breaches. Researchers have identified critical vulnerabilities in ELDs and fleet management systems allowing driving trucks to be completely stopped.

Recent cybersecurity statistics and events for the transportation industry

Statistics

  • 67% of transportation incidents involved data leak and extortion.
  • 50% of incidents in the transportation industry were attributed to public facing applications and phishing, which were the primary methods used by attackers to gain access.
  • $281k in average loss per stolen shipment. Impersonation techniques are used to redirect loads.

Cyber events

  • A large LTL carrier was the victim of a ransomware attack. In 2024, 500 GB of data was stolen and its network was crippled. Operational disruptions, irate customers, and financial losses ensued. Potential lawsuits could be brought forward, and reputational damage will likely be sustained.
  • A transportation and logistics company had to resort to paper logs after its electronic logging device (ELD) vendor suffered a cyberattack. In 2023, this organization sustained significant disruptions due to this third-party cyberattack.
  • A large LTL carrier was the victim of a cyberattack exposing the data of over 21,000 individuals. 23 days were needed to fully restore system capabilities, and it was reported business was diverted to competitors.

Critical cyber insurance coverage

Privacy Liability

Covers defense and legal liabilities for failure to keep sensitive individual information and corporate information private. This also includes the failure of third parties to whom you have entrusted this information.

Social engineering and phishing

Covers lost and stolen funds due to a cybercriminal duping the insured or impersonating an employee or client. This coverage should extend to tangible property to include loss associated with loads of valuable goods redirected to attackers. Tangible property is not something all carriers offer, so it is important to carefully review terms.

Business interruption and system failure coverage

Covers the insured’s loss of income and extra expenses due to a system interruption or outage caused by a breach, network security event, or administrative error.

Contingent business interruption and system failure coverage

Covers loss of net profits due to a third-party computer network interruption or outage of their system caused by a breach, network security event, or administrative error. This should extend to both IT and non-IT vendors as a cyberattack on suppliers of physical products can have a significant impact. Not all carriers offer non-IT contingent business interruption, so it is important to carefully review terms.

To speak with a specialist about your trucking cyber risk, please contact us today.

Keep Up To Date

Subscribe to our blog for all the latest news, updates, and events from MMA and our partners

Subscribe

Tell us what you need. We’ll take it from there.

Get a Quote


    YesNo











        First, tell us about you:






        EmailPhone


        Next, tell us about your business:





        Now tell us about the coverage or coverages you need:


        Commercial InsuranceEmployee BenefitsHealth InsuranceSuretyOther



        NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

        You are ready to submit the form:

          First, tell us about you:






          EmailPhone





          Next, tell us about the coverage or coverages you need:


          AutoHomeIndividual HealthUmbrellaRecreationalWatercraftRenter’s InsuranceLife InsuranceWedding Insurance



          NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

          Now you are ready to submit the form:

            First, tell us about you:






            EmailPhone





            Next, tell us about the coverage or coverages you need:


            AutoHomeIndividual HealthUmbrellaRecreationalWatercraftRenter’s InsuranceLife InsuranceWedding Insurance



            NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

            Now you are ready to submit the form:

              First, tell us about you:






              EmailPhone


              Next, tell us about your business:





              Now tell us about the coverage or coverages you need:


              Commercial InsuranceEmployee BenefitsHealth InsuranceSuretyOther



              NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

              You are ready to submit the form:

                First, tell us about you:

                Contact Form

                -->




                    First, tell us about you:






                    EmailPhone





                    Step 1 of 2Next

                    Next, tell us about the coverage or coverages you need:


                    AutoHomeIndividual HealthUmbrellaRecreational

                     

                    WatercraftRenter’s InsuranceLife InsuranceWedding Insurance



                    NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

                    Now you are ready to submit the form:

                      First, tell us about you:






                      EmailPhone


                      Step 1 of 3Next

                      Next, tell us about your business:





                      Step 2 of 3Next

                      Now tell us about the coverage or coverages you need:


                      Commercial InsuranceEmployee BenefitsHealth InsuranceSuretyOther



                      NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

                      You are ready to submit the form:

                        First, tell us about you:






                        EmailPhone





                        Step 1 of 2Next



                        NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

                        Now you are ready to submit the form:

                          Review Form

                            First, tell us about you:






                            EmailPhone







                            NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

                            Now you are ready to submit the form:

                              First, tell us about you:






                              EmailPhone





                              Next, tell us about your claim:






                              NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

                              Now you are ready to submit the form:

                                First, tell us about you and your business:







                                EmailPhone


                                Next, tell us about the surety bond you need:







                                NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

                                Now you are ready to submit the form:

                                  Contact us for a quote:

                                    First, tell us about you:






                                    EmailPhone





                                    Next, tell us about the coverage or coverages you need:


                                    AutoHomeIndividual HealthUmbrellaRecreationalWatercraftRenter’s InsuranceLife InsuranceWedding Insurance



                                    NOTE: Before becoming effective, all changes, bind orders, or claim notifications must be confirmed by a Marsh McLennan Agency representative advising that your request has been processed.

                                    Now you are ready to submit the form:

                                      First, tell us about you:

                                      Contact Form

                                      -->

                                      cross linkedin facebook pinterest youtube rss twitter instagram facebook-blank rss-blank linkedin-blank pinterest youtube twitter instagram