--- title: Nordex Group struck by Conti ransomware description: The Nordex Group, known as one of the world's largest manufacturers of wind turbines, has confirmed a cyberattack. The attack was discovered end of last month, and Nordex disabled remote access from some networks to their turbines as a precaution. canonical_url: https://www.acronis.com/en/tru/posts/nordex-group-struck-by-conti-ransomware/ locale: en last_updated: 2026-10-27 --- * [Home](https://www.acronis.com/en/tru/) * [Articles](https://www.acronis.com/en/tru/posts/) * [Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/) 21 April 2022 # Nordex Group struck by Conti ransomware The Nordex Group, known as one of the world's largest manufacturers of wind turbines, has confirmed a cyberattack. The attack was discovered end of last month, and Nordex disabled remote access from some networks to their turbines as a precaution. Author: **[Acronis Threat Research Unit](https://www.acronis.com/en/tru/authors/acronis-threat-research-unit/)** [Video 1](https://www.youtube.com/watch?v=DuYpU2JbEz8) The Nordex Group, known as one of the world's largest manufacturers of wind turbines, has confirmed a cyberattack. The attack was discovered end of last month, and Nordex disabled remote access from some networks to their turbines as a precaution. While investigations are still ongoing, the company is in the process of restoring normal operations. The Conti ransomware group has claimed responsibility for this attack. Two ransomware gangs — Conti and Lockbit 2.0 — were together responsible for 58% of all publicly reported ransomware incidents in the first quarter of this year. That activity represents data leaked from over 500 companies. The [Active Protection](https://www.acronis.com/en-us/technology/active-protection/) within Acronis Cyber Platform (formerly Acronis Cyber Protect Cloud) blocks ransomware before it can have any impact on your business. Should systems go down for any reason, the [Advanced Disaster Recovery add-on pack](https://www.acronis.com/en-us/products/cloud/cyber-protect/disaster-recovery/) can help you to minimize business interruptions. Related articles [The Gentlemen: A closer look at a not-so-gentle ransomware-as-a- service operation](https://www.acronis.com/en/tru/posts/the-gentlemen-a-closer-look-at-a-not-so-gentle-ransomware-as-a-service-operation/) [Acronis AI Copilot: Adoption is high and growing among MSPs](https://www.acronis.com/en/tru/posts/acronis-ai-copilot-adoption-is-high-and-growing-among-msps/) [Acronis Cyberthreats Update, October 2026](https://www.acronis.com/en/tru/posts/acronis-cyberthreats-update-october-2026/) [AI agents at work: What Acronis endpoint data reveals about MSP and SMB usage](https://www.acronis.com/en/tru/posts/ai-agents-at-work-what-acronis-endpoint-data-reveals-about-msp-and-smb-usage/)