Skip to content

Vestas controversies

Controversies tied to this brand in public sources. A listing is not a finding of fault.

Back to profile3 entries

  1. 2021

    Vestas discloses ransomware attack and leaked data

    Issue disclosure

    Vestas said a ransomware attack had failed to extort the company, but attackers stole company data and leaked it externally. The company said it was investigating what data was affected and working to identify leaked data.

    Company response

    • Investigation — Vestas

      The investigations are still ongoing

    Source excerpt

    • Vestas discovered an attack from a threat actor, which we are pleased to say failed in their attempt to extort Vestas,” said Henrik Andersen, President and Chief Executive Officer. “Unfortunately, the attackers did manage to steal data from Vestas, and that data has been illegally shared externally.
    • The investigations are still ongoing
  2. 2021

    Vestas discloses cyberattack on internal IT systems

    Issue disclosure

    Vestas said its internal IT systems were targeted in a cyberattack, shutting down part of its business operations. The company said investigation and efforts to restore system integrity were ongoing.

    Company response

    • Investigation — Vestas

      At this stage, the work and investigation are still ongoing

    Source excerpt

    • The turbine maker's manufacturing, construction, and service units remain in operation, although several operational IT systems have been shut down as a precaution.
    • The Danish company announced it is working round the clock to contain a cyber security incident that occurred on Friday, with efforts directed at assessing the situation and re-establishing its IT systems' integrity.
  3. 2015

    Employee dishonesty cases identified through whistleblower system

    Vestas reported that its whistleblower program identified 26 employees involved in dishonest conduct during 2014 and 2015. The individuals were disciplined. The episode concerned internal misconduct and compliance rather than a claim that the company’s core products were defective.