Cyber Incident Victim: Norrmejerier Ekonomisk förening
Date:
Apr 2024
Location:
Sweden
Summary
A cyberattack targeted a high-tech dairy producer, forcing immediate shutdown of all production to assess the situation. The incident disrupted computerized operations at the Umeå facility, though pre-existing inventory continued distribution to retailers. Facilities in Burträsk and Luleå remained unaffected. The company reported the attack to police while working to restore operations, declining to specify the attack's origin or potential long-term consequences if unresolved.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 0 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On April 16, 2024, Norrmejerier, a high-tech dairy producer based in Umeå, Sweden, experienced a cyberattack that disrupted its operations. The attack was detected early that morning, prompting an immediate shutdown of all production systems to assess the extent of the compromise. Communications Director Petra Kangas confirmed the company’s computerized infrastructure—critical to its largely automated operations—was targeted, though she declined to specify the entry point or affected systems. Norrmejerier prioritized containment by isolating production networks, while technical teams worked to investigate the incident’s scope and restore functionality. The attack exclusively impacted the Umeå facility, with parallel production sites in Burträsk and Luleå remaining unaffected. A police report was filed following standard incident response protocols, though no details regarding potential threat actors or motives were disclosed.

The disruption halted manufacturing output, though products completed prior to the shutdown continued distribution to retail partners. Kangas acknowledged consumers would experience operational delays but emphasized no immediate shortages of existing stock. No data breaches, ransom demands, or product safety compromises were reported. Norrmejerier’s response remained focused on restoring production, with no timeline provided for full recovery. The company deferred commentary on potential long-term operational or financial impacts pending further investigation.
