Norsk Hydro

Norsk Hydro, one of the world's largest aluminum companies, faced a severe cyberattack in March, ultimately affecting all 35,000 employees across 40 countries. The attack, initiated by an infected email from a trusted customer, caused production lines to halt and forced some facilities to switch to manual operations. The financial impact approached $71 million. Despite the scale of the attack, the company chose not to pay the ransom, instead opting to restore data from backup servers and seek assistance from Microsoft's cybersecurity team. Norsk Hydro's transparent response to the breach was praised for helping to expose the tactics of cyber criminals and possibly preventing similar future threats.

Source: https://news.microsoft.com/source/features/digital-transformation/hackers-hit-norsk-hydro-ransomware-company-responded-transparency/

TPRM report: https://scoringcyber.rankiteo.com/company/norsk-hydro

"id": "nor443050724",
"linkid": "norsk-hydro",
"type": "Vulnerability",
"date": "03/2019",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Aluminum Production',
                        'location': 'Global',
                        'name': 'Norsk Hydro',
                        'size': '35,000 employees',
                        'type': 'Company'}],
 'attack_vector': 'Phishing Email',
 'date_detected': 'March 2019',
 'description': "Norsk Hydro, one of the world's largest aluminum companies, "
                'faced a severe cyberattack in March, ultimately affecting all '
                '35,000 employees across 40 countries. The attack, initiated '
                'by an infected email from a trusted customer, caused '
                'production lines to halt and forced some facilities to switch '
                'to manual operations. The financial impact approached $71 '
                'million. Despite the scale of the attack, the company chose '
                'not to pay the ransom, instead opting to restore data from '
                "backup servers and seek assistance from Microsoft's "
                "cybersecurity team. Norsk Hydro's transparent response to the "
                'breach was praised for helping to expose the tactics of cyber '
                'criminals and possibly preventing similar future threats.',
 'impact': {'brand_reputation_impact': 'Positive for transparent response',
            'financial_loss': '$71 million',
            'operational_impact': ['Production lines halted',
                                   'Facilities switched to manual operations'],
            'systems_affected': ['Production Lines', 'Manual Operations']},
 'initial_access_broker': {'entry_point': 'Infected Email'},
 'motivation': 'Financial',
 'ransomware': {'ransom_paid': 'No'},
 'response': {'communication_strategy': 'Transparent response',
              'remediation_measures': 'Restore data from backup servers',
              'third_party_assistance': "Microsoft's cybersecurity team"},
 'title': 'Norsk Hydro Ransomware Attack',
 'type': 'Cyberattack'}