Menu
Browse
Date:

Dec 2021

Location:

Canada

Summary

A serious cyberattack disrupted operations at a major Norwegian media company, halting physical newspaper production and impacting advertising and subscription systems. The incident potentially compromised customer names, addresses, phone numbers, and subscription histories, though financial data remained unaffected. The organization implemented containment measures while assessing full damage to its 90+ publications serving millions. This attack followed two other significant Norwegian breaches—one disrupting a large food producer's factory operations and another affecting regional municipal services—though all three incidents remained under investigation with operational restoration efforts underway.

CIA Posture Motives Tactics, Techniques & Procedures
Available to members 0 motives 0 techniques
Threat Actors Type Location
0 actors Available to members Available to members

Description

The cyber incident involved a Norwegian media company called Amedia, which was reportedly hit by a serious cyberattack. This attack had significant consequences for the company's operations, including the shutdown of its printing presses. As a result, the company was unable to print physical newspapers, and its presses remained halted until the issue could be resolved. The attack also impacted Amedia's advertising and subscription systems, preventing advertisers from purchasing new ads and stopping subscribers from ordering or canceling subscriptions.

Cyber Incident Image

The company's executive vice president of technology, Pål Nedregotten, stated that Amedia was in the process of gaining an overview of the situation and did not yet know the full potential for damage. Despite this, the company had already implemented comprehensive measures to limit the damage and restore normal operations as quickly as possible. Amedia publishes more than 90 newspapers and other publications that reach more than 2.5 million Norwegians, making it a significant player in the Norwegian media landscape. The disruption to its operations would have had a substantial impact on its ability to deliver news and other content to its readers.

The attack on Amedia was not an isolated incident, as it was the third major Norwegian cyberattack reported over the last several days. Another company, Nortura, one of the country's largest food producers, had announced that it had shut down its IT systems after suffering a cyberattack at several factories. The company was investigating the incident with the help of the police and was focusing on minimizing damage to its systems and operations. Additionally, Nordland fylkeskommune, the regional governing administration for a large swath of northern Norway, had also shut down its computer systems after experiencing a data breach. The incident affected some municipal services, such as schools and clinics, but officials reported that disruptions were minor.

The cyberattack on Amedia raised concerns about the potential compromise of personal information. The company's subscription system, which was affected by the attack, contains names, addresses, phone numbers, and subscription history of customers. However, Amedia stated that it was unclear whether personal information had been compromised. The company also noted that certain types of data, such as passwords, read history, and financial information, were not affected by the attack. This suggests that the attackers may have been targeting specific types of data or systems, although the exact nature and scope of the attack are not yet fully understood.

The fact that Amedia was unable to determine whether personal information had been compromised highlights the complexity and challenges of responding to cyberattacks. In many cases, it can take time to fully understand the extent of an attack and the types of data that may have been affected. This can make it difficult for companies to provide accurate information to their customers and stakeholders, and to take effective steps to mitigate the consequences of an attack. As a result, companies like Amedia must be prepared to respond quickly and effectively to cyberattacks, and to have robust systems and procedures in place to protect their data and operations.

The attack on Amedia also underscores the importance of cybersecurity for companies in all sectors. Cyberattacks can have significant consequences, including disruption to operations, compromise of sensitive data, and financial losses. Companies must be proactive in protecting themselves against cyber threats, through measures such as implementing robust security protocols, conducting regular security audits, and providing training to employees on cybersecurity best practices. This can help to reduce the risk of a successful cyberattack and minimize the consequences if an attack does occur.

The incident also highlights the need for companies to have effective incident response plans in place. Amedia's ability to quickly implement measures to limit the damage and restore normal operations suggests that the company had a plan in place to respond to a cyberattack. This would have helped to minimize the disruption to its operations and reduce the potential consequences of the attack. Effective incident response plans should include procedures for containing and eradicating the threat, restoring systems and data, and communicating with stakeholders. They should also include protocols for conducting post-incident activities, such as investigating the cause of the attack and implementing measures to prevent similar attacks in the future.

The cyberattack on Amedia is a reminder that companies in all sectors are vulnerable to cyber threats. The fact that the attack was part of a series of cyberattacks on Norwegian companies suggests that there may be a coordinated effort by attackers to target companies in the country. This highlights the need for companies to be vigilant and proactive in protecting themselves against cyber threats, and to work together with other companies and authorities to share information and best practices on cybersecurity. By taking a collaborative and proactive approach to cybersecurity, companies can reduce the risk of successful cyberattacks and minimize the consequences if an attack does occur.

The impact of the cyberattack on Amedia's operations and customers is still being assessed. The company's inability to print physical newspapers would have had a significant impact on its readers, who rely on the company's publications for news and information. The disruption to its advertising and subscription systems would also have had consequences for the company's revenue and relationships with its customers. As the company works to restore its operations and systems, it will be important for

Sources
Sources available to members
1 source