EU cyber authority: Chinese hackers attacked shipping in at least seven EU countries in 2025

A Chinese hacking group, known as "Mustang Panda," carried out repeated cyber attacks on European maritime organizations in 2025, warning the EU's Cyber Agency. The attacks, which involved espionage and the acquisition of strategic information, affected at least seven EU member states, according to the EU's ENISA agency in its annual report.

The US Justice Department suspects the group, backed by the Chinese government, of being a significant threat to EU organizations due to its advanced capabilities and ability to launch multiple attacks on the maritime sector and public administration. In 2022, the Chinese group targeted EU diplomatic missions. ENISA classified the group as one of the biggest threats in 2023, and in 2025, it also spied on Russian defense and aerospace companies.

The maritime industry is particularly vulnerable, as severe cyber attacks can have significant ripple effects on trade. China has shown interest in Western shipping companies in the past, particularly as shipping routes in the Middle East have become increasingly difficult. ENISA previously classified maritime transport as part of the "risk zone."

The agency concluded that transport, including maritime transport, and logistics are of particular interest due to their economic and political implications, especially given geopolitical developments. This article was first published in English by POLITICO.