
Cybercrime's New Frontier: Hackers Hijack Cargo for Millions, Exposing Supply Chain Vulnerabilities
Hackers are earning millions by hijacking cargo through cyberattacks on supply chain systems, with losses reaching $725 million in 2025. This trend reflects a dangerous evolution of cybercrime into physical theft, exposing systemic vulnerabilities in logistics and echoing broader patterns of ransomware and infrastructure disruption. Deeper analysis reveals regulatory gaps and economic risks missed by initial reports.
The recent FBI advisory on hackers earning nearly $725 million from hijacked cargo in the U.S. and Canada last year reveals a disturbing evolution in cybercrime, where digital attacks directly disrupt physical supply chains. This 60% surge in cargo theft losses from 2024 to 2025, coupled with a 36% increase in the average value per theft, underscores a sophisticated blend of cyber intrusion and physical theft that goes beyond traditional ransomware. Hackers are not just stealing data; they are impersonating brokers and carriers on load boards, rerouting shipments, and even extorting victims with ransom demands for stolen goods. This marks a critical shift in cybercriminal tactics, merging digital deception with real-world economic damage.
What the original coverage misses is the broader geopolitical and economic context driving this trend. Supply chain vulnerabilities have been a growing concern since the COVID-19 pandemic exposed global logistics frailties, with disruptions like the 2021 Suez Canal blockage amplifying the stakes. Cybercriminals are exploiting these systemic weaknesses, targeting high-value goods like electronics, vehicles, and pharmaceuticals—sectors already strained by inflation and geopolitical tensions. The FBI notes incidents of 'double-brokering,' where hackers insert fraudulent stops in delivery chains, but fails to connect this to the broader pattern of ransomware evolution. Groups like LockBit and Conti have historically targeted logistics firms with data theft, but now, as seen in these cargo heists, they are pivoting to direct physical asset theft, maximizing profit while minimizing traceability.
This escalation mirrors patterns seen in other domains of hybrid crime. For instance, the 2021 Colonial Pipeline ransomware attack demonstrated how digital breaches can cripple physical infrastructure, halting fuel distribution across the U.S. East Coast. Similarly, cargo hijacking represents a hybrid threat where cyber access enables physical theft, creating cascading effects on industries like automotive and retail. The anonymous source from a New York car dealership, cited in the original report, highlights stolen overseas shipments, but the deeper issue is the lack of robust cybersecurity in load board platforms—often outdated and under-secured marketplaces that are ripe for exploitation. The FBI’s mention of hackers altering Federal Motor Carrier Safety Administration data also points to a critical oversight gap in regulatory frameworks, where digital identity verification lags behind criminal innovation.
Drawing on additional sources, such as the 2023 Verizon Data Breach Investigations Report, which notes a 25% rise in supply chain-related cyber incidents, and a 2022 Department of Homeland Security report on critical infrastructure risks, it’s clear that logistics remains a soft target. These reports emphasize that small-to-medium carriers often lack the resources for advanced cybersecurity, making them easy prey for hackers who can then impersonate legitimate entities. The economic ripple effects are profound: stolen cargo drives up insurance costs, delays deliveries, and erodes trust in supply chains at a time when global trade is already under pressure from conflicts in Ukraine and trade disputes in the Indo-Pacific.
What’s at stake is not just financial loss but systemic resilience. If unaddressed, this trend could embolden state-sponsored actors—already implicated in similar hybrid attacks—to weaponize supply chain disruptions as a form of economic warfare. The FBI’s advisory is a start, but it lacks actionable recommendations beyond vague warnings. Industry and government must collaborate on securing digital logistics platforms, enforcing stricter identity verification, and deploying real-time monitoring to detect fraudulent load postings. Without such measures, the fusion of cyber and physical crime will continue to destabilize critical infrastructure, with costs far exceeding the $725 million reported last year.
SENTINEL: The fusion of cyber and physical crime in cargo theft will likely escalate, with state-sponsored actors potentially exploiting these tactics for economic disruption. Expect a rise in targeted legislation by 2026 to secure digital logistics platforms.
Sources (3)
- [1]Hackers Earning Millions from Hijacked Cargo, FBI Says(https://therecord.media/hackers-earning-millions-from-hijacked-cargo-fbi)
- [2]2023 Verizon Data Breach Investigations Report(https://www.verizon.com/business/resources/reports/dbir/)
- [3]2022 DHS Critical Infrastructure Security and Resilience Report(https://www.dhs.gov/publication/critical-infrastructure-security-and-resilience)