Menu
Browse

Ritzau

Primary URL Location Industry
ritzau[.]dk
Country Denmark
Communications Icon
Communications
Profile

Ritzau operates as a Danish news agency that gathers, produces and distributes news content to a range of media outlets including newspapers, broadcasters and online platforms. Its core service is a wire feed that supplies timely articles, photographs and multimedia material to subscribers who rely on the agency for national and international coverage. The organisation maintains editorial systems that support the creation and verification of stories before they are transmitted through its distribution network. In addition to traditional wire services, Ritzau provides live blog capabilities that allow clients to follow developing events in real time. Headquartered in Denmark, the agency functions as a key source of information for the Danish media landscape and contributes to the flow of news across Scandinavian markets. Its role is characterised by a focus on reliability and speed, enabling newsrooms to meet tight publishing schedules without maintaining extensive own‑source reporting teams.

The November 2020 ransomware attack on Ritzau highlighted both the scale of its technical infrastructure and its operational resilience. Approximately one‑quarter of the agency’s servers were encrypted, disrupting editorial systems and prompting a shift to an emergency distribution model that relied on live blogs to keep news flowing. Following established advisory guidance, Ritzau refused to pay the ransom demanded by the attackers, who were described as a “very professional” group, and did not engage with the ransom note. Recovery efforts were carried out by the organisation’s internal IT team, specialists appointed by its insurance provider and an external security firm, with the expectation that normal operations would resume within 24 hours. The incident demonstrated the agency’s capacity to maintain news dissemination despite significant server limitations, underscoring its commitment to continuity and its reliance on robust contingency procedures. While the attack caused notable operational constraints, it did not halt the agency’s ability to deliver news to its subscribers.

Incidents
Linked incidents available to members
1 incident