In June 2017, the company disclosed that it had suffered a "network cyber attack" resulting in the disruption of its worldwide operations, including manufacturing, research and sales operations. It was reported that as many as 30,000 laptops/desktops were taken off line as were 7,500 servers in the immediate response to the incident.
The cyber attack shut down production for weeks, reportedly causing $1.3 billion in damage and leading to litigation when many of the company's insurers and reinsurers denied coverage for the event claiming the Russia-linked attack constituted an act of war. In January 2022, a US court ruled in favour of the company in a lawsuit filed against its insurer.
In January 2024, the company "struck an 11th-hour settlement with insurers" with respect to the insurance dispute related to this incident. This settlement meant that the long anticipated legal definition of cyberwar and its relationship with kinetic war was avoided.
Want to discuss this case? You can purchase a 30 minute conference call with our analysts to discuss this case and the implications it has for your organisation. Just select the time and date that works for you:
We've done the analysis so you can make the decisions