NOK: its server was accessed without authorization, causing a system failure, and it cut external communication

1. 2021-12-21

   In the early hours it confirmed unauthorized access by a third party to its server. It cut external communication and is investigating the route and the scope of the system failure. [1] [2]

2. 2021-12-28

   It published a second report, saying that several business-system servers were entered and that a vulnerability it had planned to fix within the year was exploited. [3]

At the time of the announcement it had not disclosed the scope of damage, whether any threat was made, or the effect on business including production lines. [2]

In the early hours of December 21 a third party entered several business-system servers and mounted an attack that made the systems unusable, so it had to stop some operations. The exploited weakness was a vulnerability it had planned to fix within the year. [3]