BlueScope Steel

In May 2020, BlueScope Steel, headquartered in the Port of Kembla, USA, fell victim to a ransomware attack that severely disrupted its IT systems. The incident primarily targeted manufacturing and sales operations in Australia, leading to widespread disruptions in business activities nationwide. The attack forced operational halts, impacted production timelines, and strained supply chain logistics, causing financial losses and reputational damage. While the company’s cybersecurity team responded swiftly to contain the breach, the attack’s ripple effects persisted, affecting customer orders, internal workflows, and market confidence. The incident underscored vulnerabilities in critical industrial infrastructure, highlighting the growing threat of ransomware against large-scale manufacturing enterprises. No explicit mention was made of data exfiltration, but the operational outage alone posed significant financial and logistical challenges, reinforcing the need for robust cyber defenses in industrial sectors.

Source: https://cisomag.eccouncil.org/bluescope-cyber-incident/

TPRM report: https://www.rankiteo.com/company/bluescope-steel

"id": "blu234092125",
"linkid": "bluescope-steel",
"type": "Ransomware",
"date": "5/2020",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'steel manufacturing',
                        'location': 'Port of Kembla, USA (with operations in '
                                    'Australia)',
                        'name': 'BlueScope Steel',
                        'type': 'company'}],
 'date_detected': '2020-05',
 'description': 'BlueScope Steel, a company located in the Port of Kembla, '
                'USA, was hit by a ransomware attack in May 2020. The attack '
                "affected some of the company's IT systems, mainly impacting "
                'manufacturing and sales operations in Australia, followed by '
                'disruption of business activities across the country. '
                "BlueScope Steel's CFO stated that the company's cybersecurity "
                'team had acted promptly to respond to the incident.',
 'impact': {'operational_impact': 'Disruption of manufacturing and sales '
                                  'operations in Australia, followed by '
                                  'business activity disruptions across the '
                                  'country',
            'systems_affected': ['IT systems (manufacturing and sales '
                                 'operations)']},
 'response': {'incident_response_plan_activated': True},
 'title': 'Ransomware Attack on BlueScope Steel',
 'type': 'ransomware'}