NorDan Experiences Data Breach

Thursday 20 January, 15:00

All services back to normal

The cyber-attack on NorDan is over and all systems have returned to normal operation.

Eight days after the cyber-attack was detected we return to normal operations. Aside from a couple of exceptions the production at all factories have taken place as normal.

This message will be the last of the regular updates regarding the cyber-attack. IT related inquiries should be directed towards the usual contacts. Inquiries regarding the cyber-attack should be directed to NorDan AS’ Managing Director, Trond Magnar Unhammer.

Wednesday 19 January, 15:00

Heading back to normal

A week has passed since the cyber-attack against NorDan first was discovered. From now on we will gradually be heading back to normal.

The risk of new disruptions following the attack are now assessed to be small. The extensive process of neutralising the threat and safeguarding systems is running at full speed, and significant progress has been made.

All factories are now operating at normal level with mission-critical functions being taken care of. There is still significant work to be done and IT related disruptions may occur.

We would like to thank all customers, suppliers, and other partners for a close cooperation during the cyber-attack.

Monday 17 January, 15:00

Recovery efforts continue as the cyber-attack is being handled

The cyber-attack targeted towards NorDan is now being deemed as under control. Currently an intensive work is taking place preparing for normal operation.

Immediately after the initial detection of the attack and isolation of the data breach an intensive recovery effort was launched. We consider the risk for further threats following the initial attack to be low.

To avoid the spread of malicious code, NorDan systems have been disconnected from the internet the past couple of days. A decision on reconnecting the systems and the path towards normal operations will be made in near future.

Friday 14 January 2022, 13:00

Still uncertainties related to ongoing data breach

The cyber-attack against NorDan is currently being contained. It is still too soon to conclude with the full extent and effects of the attack.

Interruptions and disturbances should be expected during the ongoing process of containing and isolating malicious code present in NorDan systems. Factories are operating close to normal.

The comprehensive data gathering process is still taking place. All systems are currently being checked and verified one by one before coming back online. The cyber-attack has been reported with the police. We continue to work closely with relevant authorities.

Thursday 13 January 2022, 09:00

NorDan Experiences Data Breach

NorDan is currently the target of a cyber-attack on our IT systems. While we work to minimize the consequences, disruptions may be expected.

An unauthorized login activity in one of the core systems resulted in a data breach. The full extent of the breach and attack is still not clear.

We are now working closely with industry experts to identify, contain and remove the threat. During this process we expect disruptions and periods of unavailability across all our IT systems.