TOMRA forced to isolate its systems due to a cyberattack

TOMRA, a Norwegian mining and recycling company, disclosed that it had separated its tech systems after experiencing an extensive cyberattack. The company’s IT services and back-office apps are still offline, affecting its supply chain management.

Moreover, the company’s security requested its employees to work remotely while they were investigating the incident.

This affected company has several divisions focusing on waste and recycling solutions, mining machines, food sorting equipment, and metal sorting systems.

Most reverse vending machines continue to work offline, but some are no longer functional, and some of the devices in North America and Australia remain online.

 

TOMRA admitted that they still operate but have a limited service.

 

A TOMRA representative stated that their Recycling and Foods divisions operate as usual. However, offline digital services have rendered some of their machines partially working.

Currently, the company’s primary objective is to continue delivering its services to its customers, reducing the impact of the cyberattack. In addition, the attack has also had a limited effect on the company’s customer operations.

TOMRA’s representative also assured everyone that they have already deployed a team to establish temporary solutions for all the affected digital systems to support keeping customers’ solutions functional over time.

Unfortunately, the company has remained silent about the details of the cyberattack, like how the threat actors acquired access or if they demanded ransom. As of now, no cybercriminal group has claimed responsibility for the attack.

Experts explained that threat actors who attack a company’s operations, like TOMRA, could inflict significant social damage on the business and the global supply chain. Hence, critical sectors like this company could provide ransom immediately to avoid downtime.

Some analysts claimed that more than a third of the global food and beverage companies expect operational disruption’s revenue impact to be at least $1 million per hour.

Cybersecurity experts believe this cybercriminal attack could breed more malicious incidents since the affected networks are connected to other parts of the business. The company is investigating the incident, which could reveal more details soon.