Norsk Hydro ransomware

On March 19, 2019, Norway's Norsk Hydro — one of the world's largest aluminium producers — was hit by the LockerGoga ransomware, encrypting roughly 22,000 computers across 170 sites in 40 countries. Production lines reverted to manual operation; the company refused to pay and openly published progress updates throughout the recovery.

Norsk Hydro estimated total losses of NOK 800 million ($75 million); insurance covered roughly $3.6 million. Production continued throughout, though at reduced output, and full IT restoration took months. The company's transparent communication is widely cited as a model incident response.