Are ZPMC’s Chinese dock cranes spying on the United States?

On March 10, 2024, the Chinese conglomerate Shanghai Zhenhua Heavy Industries (ZPMC), the world leader in harbor cranes, denied all accusations of espionage. In early March of 2024, the Wall Street Journal had indeed published a report detailing an investigation by the US Congress into the cybersecurity issue posed by ZPMC cranes in the United States.

The report showed the presence of “suspicious communications equipment,” including cellular modems that can be remotely accessed, and which are provided by the Swiss company ABB. The equipment could make it possible to spy on US ports, particularly military infrastructure. The report follows the signing, on February 22, 2024, of a presidential decree aiming to strengthen the United States’ maritime cybersecurity.

“Everyday, malicious cyber actors attempt to gain unauthorized access to maritime transport control systems and networks,” wrote the White House at the time. The Biden administration plans on replacing all Chinese cranes and gantries with Japanese models. The total investment would amount to 20 billion dollars (18.3 billion euros) over five years.

ZPMC responded to the charges leveled by Congress, stating its cranes “present no cybersecurity risks for ports.” The Chinese company says it is “taking US concerns seriously and believes these reports can easily mislead the public in the absence of enough factual assessment.”

ZPMC also pointed out that ports around the world used its cranes, and that the latter “comply with international standards and relevant laws and regulations.” The ABB group recognized it sold industrial controls equipment to many crane manufacturers, including Chinese ones, without commenting on the possible uses manufacturers might make of them.