Maersk's NotPetya Recovery

Summary: Maersk, crippled by NotPetya, recovered its network through a global relay race for a backup domain controller in Ghana, reliance on external IT support, and incurring a $350 million cost.

Insights:

• A single surviving domain controller in Ghana, offline due to a power outage, became crucial for Maersk's recovery, demonstrating the importance of offsite backups.
• Maersk's reliance on partners and clients for network access and IT staff highlights the interconnectedness of businesses and the potential impact of cyberattacks on entire supply chains.
• The $350 million cost underscores the substantial financial repercussions of such attacks.

Proper Nouns:

• Maersk: A global shipping and logistics company severely impacted by NotPetya.
• Ghana: Location of the surviving domain controller.
• Maidenhead: Location of Maersk's disaster recovery center.
• Nigeria: Transit point in the relay race for the backup data.
• NotPetya: A devastating cyberattack disguised as ransomware.

Research

• How do companies secure their backup infrastructure against similar attacks?
• What measures can organizations take to mitigate the financial fallout from large-scale cyberattacks?
• What international collaborations are in place to respond to and prevent future global cyberattacks?