On March 19, 2019, Norsk Hydro, one of the world’s largest producers of aluminum, faced a systemic, worldwide network ransomware attack. Their response strategy was built upon two principles: pay no ransom and admit the breach. This resulted in unprecedented transparency and a distributed workstream that included forensics, communication management, and rebuilding.