Forward Air postmortem: CEO says an experienced team can help an organization get through a cyberattack

0
115

Several weeks before it got hit by a ransomware attack, Forward Air (NASDAQ: FWRD) did a “comprehensive roleplay” to prepare for a company disaster.

The event they were preparing for? A ransomware attack.

“Just six to eight weeks ago, we did a comprehensive roleplay that was customer facing on the assumption of if we go dark, what do we do?” Forward Air chairman and CEO Thomas Schmitt said in an interview with FreightWaves to discuss the company’s recent cyberattack.

“We hack ourselves all the time,” Schmitt said. “When we find a hole, we plug the hole.”

Forward Air was first hit with the cyberattack on December 15. By December 23, operations were coming back online. 

In a December 21 8-K filing with the Securities and Exchange Commission, Forward Air said it planned to be back online “within the coming week.” So while the company was largely back two days later, the prediction of possibly another week to recover was made because the company was “being overly cautious,” Schmitt said. “We wanted to make sure that when we brought our systems back up that they were safe for us and our customers to use.”

One thing that…

Read More…