Norsk Hydro lost $40 million plus in cyber-attack

Norway-based aluminum maker Norsk Hydro may have lost more than $40 million in the wake of the cyber-attack that paralyzed parts of its operations, Reuters reported.
Cyber Security
Norsk Hydro halted some of its production on March 19 and switched off some other units to manual operation after hackers blocked its systems with ransomware.

While Norsk Hydro’s primary metals business and most other units were able to carry on production with workarounds and manual solutions, one of its main production units struggled to recover.

On a preliminary basis, the financial impact during the first week was estimated at between 300 million and 350 million Norwegian crowns ($35 million-$41 million).

Norsk Hydro has a solid cyber risk insurance policy with recognized insurers, with global insurer AIG as lead.

“The insurance has a ceiling,” Norsk Hydro Chief Financial Officer Eivind Kallevik told the news conference. He declined to be more specific regarding the policy’s cap.

Norsk Hydro is still trying to get affected businesses back up to speed.

In the most affected business area, Extruded Solutions, production is now at 70-80 percent, except for the Building Systems business unit, where operations remain almost at a standstill.

The company said it hoped to see a reasonable level of production and shipments from building systems by the end of the week.

The company’s extrusion business transforms aluminum ingots into components for carmakers, builders and other industries.

Norsk Hydro has said it will not pay hackers to unlock its files, preferring instead to restore them from backup servers.

“The company has now entered the recovery phase following the attack, gradually restoring IT systems in a safe and secure manner to ensure progress toward normal business while limiting the impact for people, operations, customers, suppliers and other partners,” Norsk Hydro said in a statement.

Kallevik said at the news conference that a full recovery of all systems would take weeks or longer.