The Untold Story of NotPetya, the Most Devastating Cyber Attack in History

WI090118_FF_NotPetya_LO_03.jpg

Found this article from Wired.com on a devastating but apparently little-known cyberattack insightful when it comes to:

  • The importance of making the key IT investments now, not later
  • The risks any organization takes by not having a compartmentalization strategy (how do you keep an IT problem in one area of business from spreading everywhere else?) [pay particular attention to the role that Ghana played]
  • The need to pay attention to vulnerabilities that can be introduced via 3rd party software
  • The major financial and other impacts of security breaches, not just in lost time or even the need to clean and replace hardware and software, but also loss payouts to customers and potentially damaged relationships. Is your organization prepared?

I was really struck not just by the number of private sector firms affected and the global impact thereof, but also by how many public sector organizations were shut down as well. For both public and private sector organizations that are delivering critical (and I really do mean critical here) goods or services, this article is a sobering message.