A confirmed cyberattack pushed some North American factory operations into recovery mode, while a ransomware claim added pressure before the technical picture was fully known.