Aluminium producer Norsk Hydro shuts several plants after cyberattack
Giant smelters in countries including Norway, Qatar and Brazil being operated manually
Oslo — Norsk Hydro, one of the world’s largest producers of aluminium, was battling on Tuesday to contain a cyberattack that hit parts of its production, sending its share price lower and aluminium prices higher.
The company shut several metal extrusion plants, which transform aluminium ingots into components for carmakers, builders and other industries, while its giant smelters in countries including Norway, Qatar and Brazil were being operated manually.
The attack, which began on Monday evening and escalated overnight, affected the company’s IT systems for most of its activities.
“Hydro is working to contain and neutralise the attack, but does not yet know the full extent of the situation,” said the company.
The attack had not affected the safety of its staff and it was too early to assess the effect on customers.
News of the attack pushed aluminium prices up 1.2% to a three-month high of $1,944 a ton in early trade on the London Metal Exchange, before giving up some gains to trade at $1,935 in late-morning trading.
The event was a rare case of an attack on industrial operations in Norway. The last publicly acknowledged cyberattack in the Nordic country was on software firm Visma, when hackers working on behalf of Chinese intelligence breached its network to steal secrets from its clients.
Companies and governments have become increasingly concerned about the damage hackers can cause to industrial systems and critical national infrastructure following a number of high-profile cyber attacks in recent years.
In 2017, attacks later blamed by the US on Russia and North Korea caused millions of dollars of damage to companies worldwide, crippling computers in industries from shipping to sweet making. Moscow and Pyongyang have denied the allegations.
From cars to construction
In Ukraine, meanwhile, hackers have knocked electricity grids and transport systems offline, and an attack on Italian oil services firm Saipem late in 2018 destroyed more than 300 of the company’s computers.
Hydro makes products across the aluminium value chain, from the refinement of alumina raw material via metal ingots to bespoke components used in cars and the construction industry.
“Some extrusion plants that are easy to stop and start have chosen to temporarily shut production,” said a Hydro spokesperson.
The company’s hydroelectric power plants were running as normal on isolated IT systems unaffected by the outage.
The Norwegian state agency in charge of cybersecurity said Hydro contacted them early on Tuesday and that it is assisting the company.
"We are … sharing this information with other sectors in Norway and with our international partners,” said a spokesperson for the Norwegian National Security Authority. She declined to comment on the nature of the attack.
Norsk Hydro’s main website page was unavailable on Tuesday, although some of the web pages belonging to subsidiaries could still be accessed. The company was giving updates on the situation on its Facebook page.
“Hydro’s main priority now is to limit the effects of the attack and to ensure continued people safety,” it wrote in a Facebook post.
Hydro’s share price fell 3.4% in early trade before a partial recovery to trade down 0.6% by late morning. It was still lagging the Oslo benchmark index, which was up 0.8%.
Hydro, which has 36,000 employees in 40 countries, recorded sales of 159.4-billion kroner ($18.7bn) in 2018, with a net profit of 4.3-billion kroner.