PTP said it detected the incident at 23:34 hours local time on September 9. The operator immediately isolated the affected systems as a precaution, which temporarily suspended container terminal operations while recovery efforts began.
The terminal began a phased restart the following day, including manual processing for some export container gate-ins.
The terminal has since resumed container operations, according to a PTP spokesperson in a WorldCargo News report.
“While it is true that a cyber incident had forced a temporary suspension of our operations, I am glad to share that PTP has resumed its container terminal operations, with system recovery efforts advancing steadily,” the spokesperson said.
Improving Security Program
PTP said it continues to take measures to safeguard its systems and operations, with the safety and security of employees, customers, stakeholders and port operations remaining a priority.
PTP, a joint venture between Malaysia’s MMC Group and Netherlands-based APM Terminals, handled a record 14,028,375 TEU (annual container throughput) in 2025, surpassing the 14m TEU mark for the first time and setting a new annual throughput record.
On September 11, the ransomware group Direwolf publicly claimed responsibility for the cyberattack against Port of Tanjung Pelepas, according to a report on DeXpose.io, a cybersecurity and threat intelligence platform. The group issued a threat to leak sensitive data if negotiations were not initiated.
“The full leak will be published soon, unless a company representative contacts us via the channels provided,” the threat actor said in the report.
No further information was immediately available on what the attacker was seeking.
For more information on other incidents in the industry click on ICSSTRIVE.com.