News

The internet may be saving our sanity (somewhat) with animal videos and Zoom chats . . . but there is a downside. With so much more happening online—such as retail and banking, not to mention all that working from home—hackers have a lot more targets.

The data depressingly bears that out:

• Large data breaches have skyrocketed by 273% in the first quarter of 2020, according to data from cloud computing company Iomart.
• Ransomware is up 90%, according to VMware, while attacks that destroy data or networks have risen 102%. And last, “island hopping,” in which criminals infiltrate one company in order to reach its partners or clients, is up 33%.

And here’s a worrying wrinkle: according to Iomart, manufacturing is one of the hardest-hit sectors.

There can be a grim benefit to cyberattacks, in that companies can learn from others that have already survived. To that end, aluminum manufacturer Norsk Hydro’s experience with a massive ransomware attack last year provides a number of (very) hard-earned lessons. From Bloomberg Businessweek (subscription):

• After the attack, the company had to make sure its employees got paid—but banks wouldn’t connect digitally with the company due to fears of cyber infection. So one executive, at Hydro’s Brazilian location, copied the previous month’s paychecks from their external payroll system, weeding out employees who had left or been fired.
• At a Pennsylvania plant, which lost access to corporate email and to the software that organizes its orders, employees received orders on their personal accounts. Then, having dug some old computers out of storage, they printed out the forms and distributed copies on the floor.
• At headquarters, Hydro had to rebuild their entire network. They were so worried about keeping these plans safe that they barred cleaning staff from coming into the room.

Hydro’s leaders consider themselves lucky to have only lost $60 million to the attacks, which unfortunately tells you a lot.

NAM with a plan: Though manufacturers should certainly prepare for the worst, they can also take many steps to minimize, if not eliminate, the danger. The NAM provides many cyber-related resources for members, including most recently a new cyber-insurance program called NAM Cyber Cover.

And here’s good news: the NAM’s Cyber Forum, cosponsored by PwC and eSentire, is on for the fall, in a virtual format. It will be from 11:00 a.m. to 1:00 p.m. EDT on four Thursdays in a row: Oct. 1, 8, 15 and 22. To learn more, email [email protected].