A quick reaction in the first 24 hours is critical for keeping your business running after a cyberattack, according to Estes Express Lines, the less than truckload (LTL) carrier whose computer systems were struck by hackers in October, 2023.
Immediately after discovering the breach, the company cut off their internet, called in a third-party information technology (IT) support team, and then used their only remaining tools—employees’ personal email and phone contacts—to start reaching out to their shipper clients. The message on Day One: even though the company was reduced to running the business with paper and pencil instead of computers, they were still picking up loads on time with trucks.
“Customers never want to hear bad news, but they really don’t want to hear bad news from someone other than you,” the company’s president and COO, Webb Estes, said in a session today at the Council of Supply Chain Management Professionals (CSCMP)’s EDGE Conference in Nashville.
After five or six painful days, Estes transitioned from paper back to computers. But they continued sending clients daily video updates from their president, and putting their chief information officer on conference calls to answer specific questions.
Although lawyers had advised them not to be so open, the strategy worked. It took 19 days to get all computer systems running again, but at the end of the first month they had returned to 85% of their original client list, and now have 99% back, Estes said in the session called “Hackers are Always Probing: Cybersecurity Recovery and Prevention Lessons Learned.”
