I've played against a Runner deploying x2 Hemorrhage in the early game, also using NBN FA.
There was certainly pressure against my HQ, but by leaning on my mandatory draw and Jackson Howard, I was able to tip-toe around the HQ, Purging every 3-4 turns, cycling agendas back into R&D, deploying just enough ICE to cover my centrals and hanging onto Biotic Labor to score the first Astroscript.
Once I scored the first Astroscript, Game was essentially over and I won 7-0. The MU issue makes Hemmorhage difficult to get out early while also deploying the necessary Datasuckers, Parasites and Breakers needed to get successful runs to fuel it, let alone deploy Keyhole or Mediums to establish R&D lock. If the runner is willing to give up R&D lock in order to reduce the Corp's hand size by a couple of cards, NBN FA will probably accept that deal most of the time.
I also made one serious play error that reduced my opinion of Hemorrhage significantly, and that was putting a Pop-Up Window in front of a San San City grid. The runner trashed the San San and thus had a remote they could successfully run on whenever they wanted for 1 credit [and providing me a credit]. Despite being able to add simultaneous virus counters to x2 Hemorrhage for one click and one credit a turn, their Hemorrhages stalled out, Astroscript was scored by Biotic, and the Runner had invested so much energy in the early HQ pressure that they had no R&D lock answer for the mandatory draw, then purge/spend turn drawing/score agenda cycle.
With the open server, the they could run twice, fire Hemorrhage twice and I'd lose 2 cards of my choice and they'd be out of Virus Counters. My response to the runner doing that was just to draw more than two cards on my next turn. They could Run Three times, fire once to keep some virus counters, but then i could just purge. There was no situation where, as the corp, I couldn't stay ahead simply by drawing, purging and scoring, and the Hemorrhage started seeming like a very weak card.
I don't think it is actually a weak card, but it certainly was less scary than I thought it would be to face off against, even with a relatively open server to exploit.