1 SEA REPORT

1.1 Preface and purpose

There is a virus on the ECDIS of the M/V Elandsgracht. I, master of the ship,
have made a sea report about the virus because we want to learn about the
mistakes and prevent this cause from happening again.

1.2 Terms, expressions, abbreviations

ECDIS=Electronic Chart Display Information

M/V=Motor Vessel
RNC=Raster navigational charts
ENC=Electronic navigational charts
ETD=Estimated time of departure
ETA=Estimated time of arrival
2/O=Second officer

1.3 Problem, possible causes and solutions

Problem: Virus on ECDIS

Possible causes Possible solutions

Crew member connecting his phone
to the computer running the ECDIS
system.
Pressed the wrong link.
By connecting a USB stick with a
virus on it.
Buy a system to block the ports.
Educate crew not to click on links in
emails if they seem suspicious or come
from an unknown person.
Check the USB drive for malware and
viruses on a PC dedicated to the task

1.4 Safety precautions

ECDIS computers should be locked in a cabinet, USB ports should be blocked to

bridge teams and endpoint protection should be installed. All computers should
be hardened during installation and functions restricted to ECDIS applications.

1.5 Communication
- First the Master and Navigator were informed
- And finally the shipping company was informed

1.6 Sequence of events

 Virus detected on ECDIS

 Master and Navigator were informed
  Checking the ECDIS (what the virus is causing)
 Deciding to sail on the RNC system

1.7 Sea report

Name of vessel: Elandsgracht

Port of departure: Rotterdam

Port of destination: Immingham

Kind of incident: Virus on ECDIS

Date of incident: 11th October 2023

Position:

I, Captain Vanhalewijn Aaron, Master of M/V Elandsgracht, call sign PDYI, Gross
Tonnage 8448 tons, properly stowed, manned and equipped, of … registration,
transporting paper Port of departure Rotterdam (…) with ETD…, 09:00 LT. Port of
destination Immingham (…) with ETA…, 00:46 LT.

I wish to declare as follows:

On October 11, 2023, the cargo ship Elandsgracht was sailing from Rotterdam to
Immingham. But on this day the 2/O detected a virus on the ECDIS. When
detected the 2/O informed the Master and Navigator. I checked the ECDIS and
looked to things like safety depth, safety contour, units,…. Also the Primary and
Secondary position sources were checked if its selected and working correctly.
Lastly, I checked the position of the ship. After all these checks I saw ECDIS
sensor data where being manipulated with unreliable information displayed to
the officer of the watch. Luckily, only the ENC system was manipulated by the
virus. And in the end, I decided to sail further on RNC system to Immingham.
I have contacted the shipping company with all the information so they can
arrange for the ECDIS to be fixed. After investigating where the virus could have
came from. Is it most likely that the virus got onto the ECDIS by connecting a
USB stick to the ECDIS for an update. Possible causes of the virus may be the
use of a too-old window version. Another cause could be that films or photos
have been saved on the USB stick.

I, undersigned, hereby reserve the right to extend this report at any time and
place convenient.

Captain Vanhalewijn

Master MV Elandsgracht, 12th October 2023

1.8 Conclusion

What have you learnt? Opinion? Recommendations?

I have learnt that a virus is easily cached on the ECDIS, and that
you need to be very careful with USB sticks. For example, you
should not use your USB drive to put Movies or photos on it. So the
tip is keep your work and private life separate.
Cyber security awareness and training are certainly the first steps to
a safer and securer future at sea.