Nucor Corporation, the largest steel producer in North America, has confirmed a cybersecurity incident that forced the shutdown of certain production operations across multiple sites.
Unauthorized Access to IT Systems Triggers Response
According to a Form 8-K filed with the U.S. Securities and Exchange Commission (SEC), Nucor detected unauthorized access to specific internal systems by a third party. In response, the company initiated its incident response plan and took several IT systems offline as a precaution.
“Upon detecting the incident, the company began promptly taking steps to contain and respond to the incident, including activating its incident response plan, proactively taking potentially affected systems offline and implementing other containment, remediation, or recovery measures,” the filing stated.
The breach has impacted some of Nucor’s product operations, which have been temporarily shut down at select locations. The company is now working to restore these operations while continuing to assess the scope of the breach.
Operations Impacted, Investigation Underway
While the exact nature and scale of the compromise remain unknown, Nucor has engaged external cybersecurity experts and notified federal law enforcement.
“As the investigation of the incident is ongoing, the company will continue to monitor the timing and materiality of the incident,” Nucor wrote in its disclosure.
No threat actor or ransomware group has claimed responsibility as of now. Nucor has not provided information on whether customer, employee, or proprietary data was accessed or stolen.
Nucor’s Profile and 2024 Performance
Headquartered in Charlotte, North Carolina, Nucor employs over 32,700 people and operates a vast network of steel mills and recycling facilities.
In 2024, Nucor:
- Produced and sold approximately 18.5 million tons of steel
- Recycled around 18 million tons of scrap
- Generated \$30.7 billion in revenue
- Reported \$4.1 billion in gross profit
Despite the disruption, the company is in the process of restarting affected operations while containment and recovery efforts continue.
