In spring 2024, a mid-sized automotive supplier became the target of a ransomware attack. The company, with 340 employees, operates three production sites in Germany and has sales offices abroad. With annual revenues of €60 million, it is a key player in its segment.
The Cyberattack
The ransomware attack was discovered when production systems suddenly became inaccessible. All systems and data were affected, resulting in a complete production shutdown. The situation was critical and required immediate action.
Our Role
We were brought in by the crisis response manager to join the task force. Our responsibility: to coordinate internal and external communication. This included messaging for suppliers, customers – especially key accounts such as OEMs – as well as employees.
The Challenges
Communicating during and after the attack posed significant challenges. The pressure on the company was intense, and inquiries were coming from all sides. It was essential to clearly define who needed to know what – and when.
We had to act under extreme time pressure, ensure compliance with legal requirements, and maintain alignment between all stakeholders – including IT, executive leadership, and legal counsel.
Our Communication Strategy
We implemented a tailored communication strategy based on a strict “need-to-know” principle. Each stakeholder received only the information relevant to them. This helped reduce friction, manage expectations, and relieve executive leadership to focus on restoring operations.
Communication was delivered through written statements and direct verbal messaging by senior leaders.
The Outcome
Our support enabled leadership to fully focus on the technical recovery. Our comprehensive communications approach built trust by ensuring a unified voice across all channels.
Stakeholders responded positively. The company maintained valuable relationships, reduced internal communication workloads, avoided negative media coverage, and returned to business operations as swiftly as possible.
Integrated Expertise – Working with Leading Experts
We work closely with top-tier IT forensic and damage control specialists to offer holistic communication solutions. This interdisciplinary approach ensures all aspects of a cyberattack are addressed – with comprehensive, reliable support.
Tailored Solutions
Every cyberattack is unique and requires a customized communication strategy. We develop tailored plans that meet each client’s specific needs, using proven methods and best practices refined over years of experience.
Crisis Communication
In a crisis, clarity and consistency are key. We help our clients design and implement effective crisis communication strategies. This includes messaging for internal and external audiences – employees, customers, suppliers, media, and regulatory bodies. Our goal: preserve trust and protect reputation.
Training & Preparedness
Beyond consulting, we offer workshops and simulations to prepare companies for special situations like cyberattacks. Training covers crisis communication, media management, internal coordination, and response processes – helping organizations become crisis-resilient.
Long-Term Partnership
Our commitment doesn’t end with the crisis. We partner with our clients over the long term – reviewing and refining strategies regularly to ensure continued preparedness for future incidents.
Proven Impact
Our track record speaks for itself. We’ve helped numerous companies navigate cyber crises successfully, protect their reputations, and emerge stronger. Our clients value our composure under pressure and our ability to deliver results when it matters most.
