COSCO Allegations Put Commercial Shipping Under Security Scrutiny

2 September 2026

Executive Summary

An extraordinary US intelligence allegation has raised a new question for companies accustomed to treating commercial shipping providers purely as logistics counterparties.

Two senior US administration officials have told Reuters that China’s state-owned shipping giant COSCO allegedly uses concealed equipment aboard some vessels to collect military communications intelligence near foreign coastlines, including those of the United States.

The officials allege that the equipment can collect communications signals from vessels and aircraft operating across Europe, North America and Asia, and is intended to gather information relating to military communications technology and encryption.

COSCO did not respond to Reuters’ request for comment.

The Chinese Embassy in Washington strongly rejected the allegations as baseless.

No independent public evidence establishing the allegations has been presented in the Reuters report.

That distinction is essential.

However, the commercial risk exists even while the allegations remain disputed.

COSCO is one of the world’s largest shipping businesses and remains deeply integrated into international trade.

A logistics counterparty can therefore become a geopolitical or national-security exposure without failing to deliver a single container.

UK Impact

UK organisations frequently perform supplier due diligence around:

• Financial strength.
• Sanctions.
• Insurance.
• Modern slavery.
• Cybersecurity.
• ESG.
• Service performance.

The COSCO allegations highlight another emerging consideration:

strategic-security exposure.

This could matter particularly for businesses involved in:

• Defence.
• Aerospace.
• Energy.
• Telecoms.
• Ports.
• Critical minerals.
• Government contracts.
• Sensitive manufacturing.
• Research and technology.

A company’s freight provider may have legitimate access to:

• Ports.
• Cargo manifests.
• Vessel schedules.
• Facilities.
• Operational systems.
• Employee information.
• Supply-chain patterns.

Much of that information may appear commercially routine in isolation.

Combined over time, however, logistics data can reveal considerably more.

Global Impact

The Pentagon placed COSCO on a list of companies it regards as linked to China’s military in January 2025.

That designation has government-procurement and reputational implications, but it should not be described as equivalent to comprehensive economic sanctions against COSCO.

The wider episode illustrates an increasingly important business problem:

commercial infrastructure and national-security infrastructure are becoming harder to separate.

Ports, telecommunications, cloud providers, shipping fleets, satellites and logistics systems increasingly occupy both worlds.

The consequence for international companies is that traditional supplier due diligence may not be sufficient.

Our View

This should not trigger indiscriminate exclusion of Chinese suppliers or unsupported assumptions about individual companies.

It should trigger better counterparty segmentation.

Businesses should ask:

• Does this supplier have access to sensitive locations?
• What data does it receive?
• Is that data genuinely necessary?
• Which subcontractors have access to it?
• Are operational systems separated from sensitive networks?
• Could logistics data reveal strategic inventory levels?
• Does the provider operate within government or defence facilities?
• Are procurement teams monitoring geopolitical designations as well as sanctions?
• Could a future government restriction make the supplier unusable?
• Is there an alternative carrier if political restrictions change suddenly?
• Do contracts permit rapid supplier substitution?
• Is information shared on a least-privilege basis?

The broader lesson is important:

A supplier can remain operationally excellent while its geopolitical risk profile changes completely.

Supplier resilience therefore requires more than monitoring whether the supplier can continue trading.

It also requires asking whether your organisation can continue using it.

Risk Indicator: HIGH – COUNTERPARTY, SECURITY & GEOPOLITICAL

Disclaimer

The information contained within these Market Alerts is provided for general market awareness and informational purposes only. It does not constitute financial, legal, investment, regulatory or insurance advice. Whilst every effort has been made to ensure accuracy at the time of publication using multiple reputable and independently verified sources, geopolitical events, legislation, regulation and market conditions may change rapidly. Readers should obtain appropriate professional advice before acting upon any information contained herein.

Invictus Risk Solutions LLP – Helping organisations stay ahead of emerging risks through informed insight and independent analysis.