In March 2019, Norsk Hydro (a Norwegian aluminum manufacturer and renewable energy company operating across 40 countries) suffered a large-scale ransomware attack that brought its global IT network to a complete standstill. Faced with encrypted systems across 160 sites and a ransom demand payable in bitcoin, the company's leadership made a crucial choice: refuse to pay, engage with no one, and rebuild from scratch at an estimated cost of $50 million to $70 million. This case examines the decisions Norsk Hydro made in the hours, days and months that followed, from containment and incident response to stakeholder communication and organizational restructuring. It explores the ransomware threat landscape, the economics and ethics of paying or refusing a ransom, the strategic value of transparency in crisis communication, and the governance frameworks available to organizations seeking resilience rather than mere impenetrability. Norsk Hydro's response, which was anchored in its values of care, courage and collaboration, became an industry benchmark. Markets rewarded its openness; its reputation emerged stronger than before. The case challenges students to move beyond the immediate financial calculus and reflect on the deeper question: What kind of organization do you want to be when the lights go out? Suitable for MBA, EMBA and executive education programs in digital transformation, cybersecurity, and crisis management. Designed for a 90-minute facilitated session.