Norsk Hydro: how to handle ransomware in public
The aluminium maker switched to manual operations and gave daily updates. It shows how to respond with honesty.
Last week ransomware hit Norsk Hydro, one of the world’s biggest aluminium producers, across 40 countries. Several plants switched to manual operations. Staff put printed notices on doors telling people not to connect devices.
What stands out is how the company handled it: daily press briefings, regular updates on its website and Facebook while its own systems were down, and a clear statement that it planned to restore from backups rather than pay.
Lessons from the response:
- Have a way to communicate that doesn’t depend on your own email and website.
- Know how to run key operations manually.
- Decide in advance who speaks to staff, customers and press.
- Be honest early. Customers and investors gave Hydro credit for it.
An incident becomes a reputation story within hours. Prepare that side too.