Vestas is “close to normal” after getting almost all its IT systems up and running following a cyber incident earlier this month.
The Danish turbine manufacturer said it has “worked around the clock” alongside external partners to “re-establish normal operations”.
Investigators believe the incident was a ransomware attack, which hit Vestas’ internal systems and resulted in data being compromised.
“The extent to which data has been compromised is still being investigated, but for now it appears that the data foremost relates to Vestas’ internal matters,” the company stated in an update on Monday.
“Although Vestas is close to normal operations, the work and investigations are still ongoing.
“Having conducted extensive investigations, forensics, restoration activities and hardening of our IT systems and IT infrastructure, we are pleased to announce that almost all systems are up and running.”
Chief executive Henrik Andersen said the company has been through some “tough days” since discovering the cyber incident.
He said turbine operations were not impacted.
“There is still a lot of work ahead of us to and we must remain extremely diligent towards cyber threats. I would already now like to take this opportunity to thank our customers, employees and external partners for their understanding and extraordinary support in these challenging circumstances.”


