Norsk Hydro (LockerGoga)
LockerGoga ransomware hit the aluminium producer, forcing several plants to switch to manual operation. The company was widely praised for its transparency and put the cost at around $70 million.
Hunts for the credential theft and Active Directory abuse used to spread ransomware, and gives early warning before encryption reaches production.