A devastating wave of ransomware known as WannaCry spread to over 200 countries. Russia was hit hardest by infection volume. The United Kingdom, Spain and other countries saw damage to their national health services. Hospitals had to unplug computers to stop the malware from spreading.
The United States was affected mildly by this particular attack. The reasons are not fully understood. Possibly because more US users had recent Windows operating systems, while users in other countries were on older versions. That looks like a win, but it is better read as a warning of something more malicious coming.
The lesson
The next major cyber attack might be just around the corner. Cyber security should not be politicised. Government officials and businesses have everything to gain by promoting better cyber security. Recent events have put a spotlight on how important it is to strengthen security.
Protect what matters
Protecting all your data, systems and networks from all forms of malicious activities will not happen. Identify what assets matter most to defend. A data audit is an important step. What data is critical? What needs to be stored? What should be available all the time, and what should have limited access?
Hold teams accountable
Cyber security teams should be held accountable for compliance with fundamental information security standards. If compliance is imperfect, the attacker already knows where the weakness is.
Have a communication plan
Do not wait for the middle of an attack to brainstorm with your board, shareholders and clients. Look at how other companies have managed or failed to manage their communications under attack.
Originally published 17 May 2017. Migrated to the new IRC site in 2026.