STRIKE0 / OFFENSIVE SECURITYAUTONOMOUS RED TEAMING / HUMAN-DIRECTED
PUBLIC INCIDENT DOSSIER / 27 JUN 2017
DISRUPTION / COMPANY ESTIMATE

Maersk
Security incident.

Maersk estimated a USD 200-300 million financial impact after the NotPetya attack disrupted container-related operations.

$200-300M
COMPANY-ESTIMATED FINANCIAL IMPACTEstimated business impact, not stolen money or ransom. The range is more meaningful than a single point figure.All incidents ↗
01 / DOCUMENTED FINDINGSPUBLIC-SOURCE ANALYSIS
WHAT HAPPENED

What the evidence shows.

The company described system shutdowns, manual workarounds, lost volumes and extraordinary IT and operations costs. Its Q2 2017 investor presentation explicitly characterized this as an expected impact range.

MEASUREMENT / INTERPRETATION

What the number means.

Estimated business impact, not stolen money or ransom. The range is more meaningful than a single point figure.

CONTROL QUESTIONS

How to test resilience.

Software supply-chain pathways, segmentation, restore capability and continuity of critical operating systems.

Read cited source ↗
TURN LESSONS INTO VALIDATION

Find the path before an attacker does.

Discuss a scoped assessment ↗