Still, it undoubtedly cost them a lot. The question is did it cost them more than the prevention would have?
You say of course, they only needed to be up-to-date on patches. But there's a cost to that, and we don't know that they don't insure (or self-insure) against IT disasters (they likely do, given their size and scope).
Somewhat-to-mostly, yes. http://gcaptain.com/maersk-operational-update-on-cyber-attac...
Still, it undoubtedly cost them a lot. The question is did it cost them more than the prevention would have?
You say of course, they only needed to be up-to-date on patches. But there's a cost to that, and we don't know that they don't insure (or self-insure) against IT disasters (they likely do, given their size and scope).