FDX NYSE Destructive cyberattack

FedEx

NotPetya significantly disrupted FedEx subsidiary TNT Express worldwide, affecting communications, operations, revenue and restoration work.

1 month vs SPY -5.2 pp Below SPY

-3.6% FDX vs +1.6% SPY

DisclosureJun 27, 2017 · time unknown
Company’s roleAffected parent company
Available data12 months complete
Share typeCommon stock · FDX

This site shows how share prices moved after an incident became public. It does not prove that the incident caused the move. Company news, sector moves and the wider market can affect every result. Educational only — not investment advice.

Disclosure timing

When could the market react?

The baseline is the last adjusted close before the news was public. The reaction session is the first close afterward.

  1. 01Baseline sessionJun 26, 2017

    Normalized to 100 for both FDX and SPY.

  2. 02Public disclosureJun 27, 2017 · time unknown

    Publication time is not documented; lower timing precision.

  3. 03First reaction closeJun 27, 2017

    -0.5% company total return versus -0.8% for SPY; +0.3 pp market-relative return.

Disclosure time is unknown; the previous session close is used as baseline.

Time windows

Company vs SPY

Each row uses the last trading session on or before its target date. “Market-relative” is the company return minus the SPY return, in percentage points.

Returns measured from the shared baseline session
WindowEndpointFDXSPYMarket-relativeSignal
First reaction Jun 27, 2017 -0.5% -0.8% +0.3 pp Above SPY
+7 days Jul 3, 2017 +0.9% -0.4% +1.4 pp Above SPY
+1 month Jul 27, 2017 -3.6% +1.6% -5.2 pp Below SPY
+3 months Sep 27, 2017 +2.4% +3.3% -0.9 pp Below SPY
+6 months Dec 27, 2017 +16.6% +11.0% +5.6 pp Above SPY
+12 months Jun 27, 2018 +7.7% +12.8% -5.1 pp Below SPY
Compare with current catalog aggregates
WindowThis caseCatalog medianCatalog meann
First reaction+0.3 pp-0.8 pp-1.5 pp30
+7 days+1.4 pp-2.0 pp-4.0 pp30
+1 month-5.2 pp-6.6 pp-6.8 pp30
+3 months-0.9 pp-5.1 pp-6.6 pp30
+6 months+5.6 pp-5.6 pp-7.5 pp30
+12 months-5.1 pp-3.7 pp-10.1 pp30

Normalized total return

FDX compared with SPY

Baseline session = 100. Adjusted close reflects splits and reinvested distributions.

FedEx had +7.7% company total return versus +12.8% for SPY; -5.1 pp market-relative return. The chart shows normalized adjusted-close performance for up to 24 months.

View tabular chart fallback
Representative normalized chart points, sampled approximately monthly
DateFDXSPY
Jun 26, 2017100.0100.0
Jul 26, 201799.2101.7
Aug 24, 201796.0100.3
Sep 25, 2017102.0102.8
Oct 24, 2017105.1106.0
Nov 22, 2017101.4107.3
Dec 22, 2017116.6111.1
Jan 25, 2018125.0117.6
Feb 26, 2018118.7115.4
Mar 27, 2018109.7108.6
Apr 26, 2018115.4111.0
May 25, 2018117.5113.4
Jun 26, 2018111.0113.7
Jul 26, 2018113.0118.6
Aug 24, 2018114.8120.4
Sep 25, 2018112.4122.3
Oct 24, 201898.3111.6
Nov 23, 2018105.0110.7
Dec 26, 201875.5104.2
Jan 28, 201982.0111.6
Feb 27, 201985.7118.1
Mar 28, 201984.2119.3
Apr 29, 201988.3124.9
May 29, 201975.5118.2
Jun 27, 201977.6124.5

Price recovery

Recovered

Here, recovery only means that adjusted close reached the baseline again. It does not mean every effect of the incident ended.

State
Recovered
Initial trough
-0.5% on Jun 27, 2017
Recovery close
Jun 28, 2017
Calendar days
1
Observation cap
24 months after disclosure

Hypothetical $1,000

What would $1,000 have looked like?

Compare $1,000 in FDX with $1,000 in SPY, bought and measured on the same dates.

FDX value $1,153 FedEx
SPY value $1,115 US market benchmark
Difference vs SPY $39 Observed result

Entry Jun 30, 2017 Exit Dec 29, 2017

Uses fractional shares and adjusted close. Leaves out taxes, fees and slippage. The holding period starts on the purchase date. This is a historical illustration, not an investment strategy.

Case note

FedEx said the NotPetya malware significantly affected TNT Express’s worldwide operations and communications. Contingency plans restored core shipping services, but the company reported lost business and substantial recovery work.

The listed parent is the unit of analysis because FedEx owned the affected operator. The record shares a campaign cluster with Merck and Mondelez but retains its own disclosure, price series and outcomes.

Shared campaign

Other Notpetya 2017 cases

The cases share a campaign, but each company keeps its own returns.

Evidence

Sources and case review

We qualify each case before checking its price results. These links support the disclosure date, listing, incident and business impact.

  1. primary Sep 19, 2017
    FedEx first-quarter fiscal 2018 Form 10-Q — NotPetya cyberattack FedEx / U.S. SEC Supports: Disclosure, Listing, Impact, Description
  2. Listing evidenceChecked Jul 20, 2026
    FedEx first-quarter fiscal 2018 Form 10-Q U.S. Securities and Exchange Commission FedEx's event-period filing confirms its issuer identity, NYSE registration and the TNT subsidiary impact.

Why it is included. FedEx directly controlled TNT Express when the campaign significantly disrupted its worldwide delivery operations and later reported measurable lost business and restoration effects. Reviewed Jul 20, 2026.