What happened

Nordex detected a cyberattack on 31 March and shut down internal IT systems across several business units. It also disabled remote access from its corporate network to customer turbines as a precaution and established alternative monitoring. Turbines continued operating without restriction, and wind-farm communications with grid operators and energy traders remained available. Nordex later said unavailable business applications and databases affected production and commissioning schedules. The company did not publicly identify an attacker in the cited disclosure, so the record does not assert a ransomware family or state sponsor.

When cited sources give different casualty, damage or spill figures for this event, they’re reported side by side above rather than merged into one number. See how confidence levels work.