FedEx reports June's NotPetya cyber-attack cost its TNT Express division around $300M
Danny Palmer / ZDNet :
Context & Ripple Effects
FedEx is the third major multinational to put a number on NotPetya damage, after Maersk projected $200M-$300M in lost Q3 revenue and Merck disclosed a ~$310M Q3 hit to manufacturing, research, and sales. The pattern across all three: the malware did not target them — it spread from Ukrainian software supply chains — yet each absorbed a nine-figure loss.
First-order effects
- FedEx's TNT Express division takes an immediate ~$300M charge, hitting the integration economics of the acquisition that brought TNT under FedEx in the first place.
- TNT's shipping operations were disrupted directly, making FedEx one of the clearest cases of collateral damage in a campaign aimed at Ukrainian targets.
Second-order effects
- Insurers face mounting NotPetya claims across FedEx, Maersk, Merck, and Mondelez — and Mondelez's $100M suit against its insurer signals the coming fight over whether state-sponsored attacks fall under war exclusions.
- Rivals like Maersk are already spending beyond lost revenue: its recovery required reinstalling 4,000 servers, 45,000 PCs, and 2,500 applications, setting the benchmark for what post-attack rebuilds actually cost.
Third-order effects
- If carriers keep refusing state-sponsored-cyber claims, corporates will restructure coverage and vendor requirements around recoverability rather than prevention — pushing resilience criteria into procurement and board-level risk decisions.
- The cumulative toll, estimated at over $10B worldwide for a weapon aimed elsewhere, builds the case for treating critical logistics and pharma infrastructure as shared security obligations rather than each firm's private problem.
The trend: State-sponsored malware with global collateral reach is turning nine-figure corporate losses and insurance-recovery litigation into a recurring feature of geopolitical conflict.