On March 19, 2019, Hydro was hit by an extensive cyber-attack. The attack affected our entire global organization, with the business area Extruded Solutions having suffered the most significant operational challenges and financial losses. Hydro’s other business areas – Bauxite & Alumina, Primary Metal, Rolled Products and Energy – was able to produce close to normal despite the attack, although based on work-intensive workarounds and manual procedures.
Hydro have now resumed normal operations. During and after the attack, Hydro worked 24/7 with all available internal resources and in close cooperation with external expertise to resolve the situation. All PCs and servers across the company was reviewed, cleaned for any malware and safely restored, according to strict guidelines to ensure security and safety. Encrypted PCs and servers were rebuilt based on back-ups. We have reorganized our security team to better detect and respond to cyber incidents.
Hydro is in dialog with relevant Norwegian and international authorities, including Norway’s National Investigation Service (Kripos) and the Norwegian National Security Authority (NSM). Hydro has estimated the total cost to be in the range 550-650 MNOK (65-75 Mio USD).