INCIDENT: Norsk Hydro Production lines stopped

Production lines had stopped at some of its 170 plants.

The ransomware LockerGoga blocked the company’s systems, forcing a switch to manual operations and workarounds. The Extruded Solutions unit, which makes components for car manufacturing, construction and other industries, reduced its output by 50%. Administrative systems, such as reporting, billing and invoicing, suffered delays. It took Norsk Hydro several weeks to bring operations back to normal.

Incident Date

May 18, 2019



Estimated Cost

$71MM in lost margins and low production volumes.


Type of Malware:

Threat Source:

No threat source identified


  • Why the Norsk Hydro attack is a ‘blueprint’ for disruptive hacking operations
  • Ransomware Behind Norsk Hydro Attack Takes On Wiper-Like Capabilities



Pin It on Pinterest

Scroll to Top