Merck hit by 2017 NotPetya cyber-attack
Merck was hit by the NotPetya cyber-attack in 2017. It later fought its insurers over a $1.4 billion insurance claim, and a settlement was reported in January 2024. The company also strengthened its cyber security strategy after the attack.
Key facts
- Affected organisation
- Merck
- Incident type
- Malware
- Occurred / detected
- Not confirmed
- Scale of damage
- Not confirmed
- Cause / method
- NotPetya malware attack
- Location
- United States
Timeline
- It was reported that Merck had settled with its insurers in a $1.4 billion insurance dispute related to the 2017 cyber-attack.
- Merck's cyber security strategy, strengthened after the NotPetya attack, was presented.
3 related reports
Other incidents at Merck
Merck data breach exposes financial account information
Impact: Financial account information exposed
A data breach at Merck exposed financial account information. The scale of the damage, the date of the incident, the cause of the leak and the response have not been confirmed.
Read on Claim Depot ↗Merck service error exposes personal data of up to 108 people
108Impact: Personal information of up to 108 people
An error in Merck's new medication record management service exposed the personal information of up to 108 people to other users. An investigation found a problem in which different users accessing the service were treated as the same person, as well as a delay in notifying the leak. A penalty surcharge of 80 million won and an administrative fine were imposed for negligent data protection and late notification.
Read on 연합뉴스 ↗
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.