What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Some links on this page are affiliate links: if you buy through them we may earn a commission, at no extra cost to you.
FedEx did not lose $300 million to a ransom payment after the June 27, 2017 malware attack. The company estimated that the disruption reduced its fiscal first-quarter 2018 results by about $300 million, or $0.79 per diluted share. Most of the damage came from lost TNT Express shipment revenue and the cost of restoring systems.
The attack primarily crippled TNT Express, FedEx’s international delivery subsidiary, rather than shutting down every FedEx business. FedEx later estimated that the incident had reduced results by approximately $400 million during the first half of fiscal 2018.
What happened to FedEx?
On June 27, 2017, malware infiltrated TNT Express systems and encrypted data, disrupting operations and communications worldwide. FedEx initially referred to the malware as “Petya”; later company filings identified the incident as NotPetya.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →TNT experienced widespread service delays, invoicing and customer-service problems, and interruptions to specialized customer systems. Employees continued some work manually, while contingency plans routed certain TNT shipments through the FedEx Express network.
#1 Best Overall
![Norton 360 Deluxe Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
FedEx said the systems and data of its other companies were not affected by the attack. It also reported no known breach or loss of customer data to third parties at the time of its filings. That qualification matters: it means FedEx had not identified such a loss, not that investigators proved no information was ever accessed.
FedEx’s contemporary disclosure is available in its fiscal first-quarter 2018 Form 10-Q.
What did the $300 million figure actually mean?
FedEx described the amount as an estimated negative impact on operating results. “FedEx lost $300 million in profit” is understandable headline shorthand, but it is not the most precise accounting description.
- Period: FedEx fiscal first quarter 2018, ended August 31, 2017.
- Estimated impact: approximately $300 million.
- Estimated diluted-share effect: $0.79.
- Main causes: lower TNT shipment volumes and incremental information-technology restoration expenses.
The figure was not a reported $300 million ransom, a confirmed theft of cash, or necessarily a $300 million reduction in GAAP net income alone. Lower package volumes meant foregone sales, while system recovery created additional expenses. FedEx’s earnings release said the attack-related decline was partly offset by overall revenue growth, lower incentive-compensation accruals, and cost-management initiatives.
Rank #2
- DEVICE SECURITY - Award-winning McAfee antivirus, real-time threat protection, protects your data, phones, laptops, and tablets
- SCAM DETECTOR - We'll automatically identify risky texts, emails, and videos that attempt to steal your personal or financial information. You can even use our mobile app to check social messages and QR codes for scams on-demand, without missing a beat.
- SECURE VPN – Secure and private browsing, unlimited VPN, privacy on public Wi-Fi, protects your personal info, fast and reliable connections
- IDENTITY MONITORING – 24/7 monitoring and alerts, monitors the dark web, scans up to 60 types of personal and financial info
- SAFE BROWSING – Guides you away from risky links, blocks phishing and risky sites, protects your devices from malware
Why TNT was the exposed part of the network
TNT was a large international carrier with its own operational systems and dependencies. FedEx had acquired it in May 2016, only about a year before the attack.
FedEx disclosed that TNT operated in Ukraine and used a compromised Ukrainian tax-software product through which the malware entered its environment. Those facts make inherited technology, third-party software, and integration important risk considerations. They do not, however, prove that the acquisition itself caused the intrusion or that FedEx’s integration work was the direct root cause.
This distinction is useful for investors and managers: an acquired company can bring valuable capacity and customers while also bringing legacy systems, software dependencies, and different security practices that must be understood and connected safely.
How the financial estimate changed
| Date | Development | Financial significance |
|---|---|---|
| June 27, 2017 | NotPetya significantly disrupts TNT Express. | Immediate operational crisis. |
| July 17, 2017 | FedEx files its fiscal 2017 annual report with additional cyberattack disclosure. | Warns the effect is likely material but not yet fully measurable. |
| September 19, 2017 | FedEx reports fiscal Q1 2018 results. | Estimates approximately $300 million of negative impact and $0.79 per diluted share. |
| February 28, 2018 | FedEx reports its fiscal Q2 filing. | Estimates approximately $400 million for the first half of fiscal 2018. |
| May 31, 2018 | Fiscal 2018 closes. | Annual report retains the approximately $400 million first-half estimate and notes lingering effects. |
The later estimate did not mean FedEx paid another $100 million ransom. It reflected the continuing business effects of reduced TNT volumes and restoration work. FedEx’s second-quarter filing and 2018 annual report provide the subsequent disclosures.
Rank #3
![Norton 360 Deluxe Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
Recovery took more than restarting computers
FedEx said substantially all TNT services were restored during the first quarter of fiscal 2018. By the following quarter, critical operational systems and business data had been restored or recovered, and core shipping services were back in place.
That did not make the disruption disappear immediately. Recovery included rebuilding communications, restoring encrypted systems and data, processing shipments and customer requests manually, clearing delays, and bringing specialized customer-specific systems back online. Lower TNT shipment volumes and continuing restoration work still affected results after basic service returned.
Was customer data stolen?
FedEx reported that it knew of no third-party data breach or loss connected with the TNT incident when it filed its reports. The documented harm was primarily operational: encrypted systems, delayed shipments, invoicing problems, lost revenue, and restoration costs.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Repair Windows errors before they cause bigger problems3Fix the driver behind crashes, sound loss and screen glitchesA serious cyber event therefore does not require a confirmed data theft. For a logistics company, inability to accept, route, invoice, track, or deliver packages can itself become a major financial event.
Rank #4
- SPEED-OPTIMIZED, CROSS-PLATFORM PROTECTION: World-class antivirus security and cyber protection for Windows (Windows 7 with Service Pack 1, Windows 8, Windows 8.1, Windows 10, and Windows 11), Mac OS (Yosemite 10.10 or later), iOS (11.2 or later), and Android (5.0 or later). Organize and keep your digital life safe from hackers
- SAFE ONLINE BANKING: A unique, dedicated browser secures your online transactions; Our Total Security product also includes 200MB per day of our new and improved Bitdefender VPN
- ADVANCED THREAT DEFENSE: Real-Time Data Protection, Multi-Layer Malware and Ransomware Protection, Social Network Protection, Game/Movie/Work Modes, Microphone Monitor, Webcam Protection, Anti-Tracker, Phishing, Fraud, and Spam Protection, File Shredder, Parental Controls, and more
- ECO-FRIENDLY PACKAGING: Your product-specific code is printed on a card and shipped inside a protective cardboard sleeve. Simply open packaging and scratch off security ink on the card to reveal your activation code. No more bulky box or hard-to-recycle discs. PLEASE NOTE: Product packaging may vary from the images shown, however the product is the same.
FedEx had no insurance covering this attack
FedEx explicitly stated that it did not have cyber or other insurance covering this attack. That disclosure helps explain why the estimated effect was absorbed directly in the company’s reported results. It should not be generalized into a claim that FedEx has never carried any cyber insurance; the filing addressed coverage for this incident.
Do not confuse NotPetya with WannaCry
FedEx’s fiscal 2017 annual report also mentioned that the company was among those affected by the May 2017 WannaCry outbreak. FedEx said WannaCry did not materially disrupt its systems or create material costs. WannaCry was a separate, comparatively minor event and was not responsible for the $300 million TNT impact.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the incident teaches about cyber-related financial risk
- Downtime can cost more than technical repair. Lost transactions and reduced shipping volumes may exceed direct IT expenses.
- Operational technology and business systems are financial assets. Invoicing, customer service, routing, and tracking failures quickly affect revenue.
- Acquisitions require cyber due diligence. Legacy platforms and third-party software can create concentration risk, even when no filing proves that integration caused a breach.
- Continuity planning matters. Manual processing, network redundancy, tested restoration, and clean or isolated backups can limit the duration of lost revenue.
- Security is not a one-time purchase. FedEx’s filings note that technology-security, IT-risk-management, and disaster-recovery measures require continual updating as threats evolve.
For investors, the practical question is not merely whether a company has experienced a data breach. It is whether it can continue earning revenue when critical systems are unavailable, how much insurance applies, and whether management discloses business-interruption exposure clearly.
The bottom line on FedEx’s $300 million malware hit
The headline was based on a real and substantial earnings effect, but it compresses several facts. NotPetya mainly disrupted TNT Express, not every FedEx operation. FedEx initially estimated a $300 million reduction in fiscal Q1 2018 results, driven chiefly by lost shipment revenue and recovery costs, and later put the first-half fiscal 2018 impact at approximately $400 million. There was no reported $300 million ransom payment, and FedEx reported no known third-party data loss at the time.
Best Value
- DEVICE SECURITY - Award-winning McAfee antivirus, real-time threat protection, protects your data, phones, laptops, and tablets
- SCAM DETECTOR - We'll automatically identify risky texts, emails, and videos that attempt to steal your personal or financial information. You can even use our mobile app to check social messages and QR codes for scams on-demand, without missing a beat.
- SECURE VPN – Secure and private browsing, unlimited VPN, privacy on public Wi-Fi, protects your personal info, fast and reliable connections
- IDENTITY MONITORING – 24/7 monitoring and alerts, monitors the dark web, scans up to 60 types of personal and financial info
- SAFE BROWSING – Guides you away from risky links, blocks phishing and risky sites, protects your devices from malware
Frequently Asked Questions
Did hackers steal $300 million from FedEx?
No. FedEx estimated that the attack reduced fiscal first-quarter 2018 results by about $300 million, primarily through lost TNT shipment revenue and system-restoration costs. The company did not report a $300 million cash theft or ransom payment.
Which FedEx business was affected by NotPetya?
TNT Express, FedEx’s international subsidiary, was the principal affected operation. FedEx said the systems and data of its other companies were not affected.
How large was the final reported impact?
FedEx later estimated that NotPetya negatively affected results by approximately $400 million during the first half of fiscal 2018.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
