Cyber Incident Victim: WestRock
Date:
Jan 2021
Location:
United States of America
Summary
WestRock detected a ransomware incident affecting certain operational and IT systems, prompting immediate response and containment efforts supported by internal security teams and external cyber defense firms. The company notified law enforcement and customers while working to restore systems and maintain business operations to mitigate disruptions. The attack caused delays across parts of the organization, potentially leading to deferred or lost revenue, incremental costs, and adverse financial impacts, with reports indicating a temporary decline in share value following the disclosure. Recovery initiatives were prioritized to minimize effects on customers and operational continuity.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 3 motives | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On January 23, 2021, WestRock Company detected a ransomware incident affecting certain operational and information technology systems. The company immediately activated response and containment protocols following discovery. Security teams, supported by external cyber defense firms, initiated remediation efforts to address the attack. WestRock notified law enforcement agencies about the breach and proactively contacted customers to inform them of the situation. Systems recovery operations commenced promptly, with teams prioritizing the restoration of affected infrastructure while attempting to maintain normal business operations. The company focused on minimizing disruptions to customer service and internal workforce activities throughout the incident response process.
The ransomware attack caused immediate operational delays across unspecified business units within WestRock's operations. These disruptions had the potential to result in deferred or lost revenue streams and incurred unplanned expenses related to incident response and recovery. The company acknowledged that these financial impacts could adversely affect its quarterly or annual financial performance. Market reaction to the disclosure included a 3.5% decline in WestRock's pre-market stock price, reflecting investor concerns about the incident's business implications. Despite these challenges, WestRock maintained active management of the situation, continuing recovery efforts while monitoring for potential lingering effects on systems and operations beyond the initial containment phase.