Board / audit committee
Record what management knew, decided and expects.
Confirmed facts
- INC-2026-0113: Meridian Stamping ransomware — ERP and EDI unavailable. Reported by Supplier notification (VP Operations, phone + letter); severity S1.
- Meridian Stamping systems affected: Order and release intake (830, 862), ASN generation (856), Outbound shipping labels, Invoice transmission (810).
- 8 production line(s) across 3 plant(s) are dependent on the affected supply.
- Earliest calculated stoppage: Synthetic SC Assembly — Line SC-2 (final assembly) in 22.4 hours.
- 0 decision(s) recorded with authority, reasoning and rejected alternatives.
Estimates — labelled as estimates
- Revenue exposure over the 48h planning horizon: 130,211,920 (estimate, based on recorded rates and prices).
- Profit impact is not stated: no customer-approved contribution ratio has been entered.
- Supplier-stated restoration: 72h (supplier statement, not independently verified).
Stated unknowns
- 61 inbound shipment(s) unconfirmed — excluded from cover.
- 1 unresolved part-to-line link(s) — excluded from exposure.
- No customer-approved contribution ratio — value is stated as revenue at risk, not profit.
- Cost not quantified: Contractual penalty rates — not supplied.
- Cost not quantified: Customer line-stop charges — not supplied.
- Cost not quantified: Premium logistics contract rates — internal standard rate used.
- Cost not quantified: Labour overtime agreements — internal standard rate used.
- Cost not quantified: Contribution margin — no approved methodology.
Action being taken
- Reduce the production rate to 70% — decide within 21.4h.
- Release 3221 units of protected safety stock — decide within 22.4h.
Release restrictions
- Contains no technical attack detail and no supplier-confidential information.
- Figures are stated as exposure at risk, not as booked loss.
Next scheduled update in 4h, or immediately if a watch condition is breached.