Breaches and ransomware that turned IT problems into board-level crises.
Hackers stole card data for 40M accounts and personal details for up to 70M customers just before Christmas. Q4 profit fell 46%.
The board met monthly instead of quarterly. CIO Beth Jacob resigned, then CEO Gregg Steinhafel stepped down about five months after disclosure.
One of the first big-company CEOs to fall over a breach: cyber is now a CEO and board risk.
Attackers exploited an Apache Struts flaw that had a patch available. Executives sold shares before disclosure.
The CIO and CSO retired, then CEO Richard Smith retired. A board member became non-executive chair and an interim CEO was named.
Patching discipline and a rehearsed breach response are governance issues.
NotPetya malware wiped Maersk’s global network. One domain controller in Ghana survived because a power cut had taken it offline.
The company rebuilt about 4,000 servers and 45,000 PCs in roughly ten days and openly shared its lessons.
Resilience, offline backups and segmentation decide how long you stay down.
BlackCat hackers entered Change Healthcare through a server with no multi-factor authentication. US claims and payments stalled for weeks.
CEO Andrew Witty personally approved the ransom and testified to the Senate and House. The company advanced $6.5B to affected providers.
Acquired companies’ legacy IT is the board’s risk too, and ransom decisions need a plan.
Hackers (linked to Scattered Spider) tricked staff at a third-party contractor to break in. Contactless payments and stock systems were hit too.
Leadership forecast about a £300M operating-profit hit, aimed to halve it through insurance and cost control, and sped up tech upgrades.
Social engineering of suppliers is a top risk; third-party access needs board attention.
A cyberattack on 31 August shut JLR’s factories in the UK and abroad for about a month, leaving suppliers near collapse.
JLR secured a five-year £1.5bn bank loan backed by the UK government, believed to be the first state support of its kind after a cyberattack.
A cyberattack can become a national economic and supply-chain crisis.