Cyberattack on Evraz prompts temporary layoff

No confidential data from customers or employees compromised, steel firm says

Evraz North America was hit with a cyberattack Wednesday that affected computer systems continent wide and caused “interruptions” to its Regina operations, the company confirmed Thursday.

Evraz spokesman Patrick Waldron told the Leader-post temporary layoff notices are being issued in Regina as a result.

“Our information technology teams are working to restore these systems as soon as possible,” he said.

According to Waldron, no confidential information from customers or employees was compromised.

An Evraz employee anonymously provided a copy of a document that he said the company had posted inside its Calgary facility.

It said Evraz North America had been hit by a ransomware attack that affected email, shipping, product certification, internet and networks, among other systems.

Waldron did not deny the report about a ransomware attack, though he did not confirm it. He confirmed that the issue is affecting the company’s email systems.

The head of the union representing Regina steelworkers said he believes late-shift workers at the Evraz steel mill will likely be sent home Thursday as a result.

Mike Day, president of USW 5890, said that information was communicated to him by management. He said it’s unclear how long workers will face a temporary layoff while the company tries to resolve the issue.

He said management has raised the prospect of using a three-day layoff clause.

“It doesn’t look good,” said Day. Day said there are currently staff at the plant doing maintenance work and cleanup, but he doubts the plant itself will be in operation.