WestRock Provides Update on Ransomware Incident

March 24, 2021


Atlanta, GA-based WestRock is undertaking extensive efforts to identify, contain and recover from this incident quickly and securely. Upon discovering the incident, WestRock immediately began an investigation, implemented business continuity processes and initiated response containment protocols with the support of cybersecurity experts. These actions included proactively shutting down certain systems in an abundance of caution, as well as taking steps to supplement existing security monitoring, scanning and protective measures. The Company also implemented measures, including manual processes, to respond to customers’ needs. The Company is now systematically bringing its information systems back online in a controlled, phased approach. The company reported packaging production through February 4 was approximately 85,000 tons lower than plan.

Incident Date

February 4, 2021

Estimated Cost



Type of Malware

No Malware identified

Threat Source

No threat source identified