Cyber attack shuts down food giant JBS
Australian operations have been suspended for at least 24 hours as IT professionals work to restore services
The world's largest meat processor, JBS Foods, has had its production network severely disrupted following a cyber attack.
The firm said over the weekend that some of the servers supporting its US and Australian IT systems were compromised by unidentified hackers, according to Beef Central. The firm suspended all affected systems, and activated its global network of experts and IT professionals to resolve the situation.
JBS' backup servers weren't affected, and the company isn't aware of any evidence that customer, supplier, or employee data was seized or abused as part of the cyber attack. Operations, however, were immediately disrupted, with JBS shutting production down in Australia for at least 24 hours. The full extent of the attack is still being measured.
"The technology they use goes to the heart of the quality assurance of the beef they are processing," said Australia's agriculture minister, David Littleproud, to ABC. "We need to make sure we can get that up and going to give confidence not just to consumers in Australia, but also to our export markets.
"They are obviously working with law enforcement agencies here in Australia and we're working in partnership with other countries to get to the bottom of this. Since it is a global attack it's important not to speculate that it's emanated from any particular place, just yet."
RELATED RESOURCE
Don’t just educate: Create cyber-safe behaviour
Designing effective security awareness and training programmes
The company said it would strive to restore operations as soon as possible, but doing so would be impossible without full access to its IT and internal systems.
The nature of the attack, or the intentions of the attackers, are not known at this time, although the attack style is consistent with several other high-profile cyber attacks against large businesses in recent months, including ransomware attacks.
Bose, for example, confirmed last week that it had suffered an attack in early March, with employee data being exposed in the process. Various health services across the world, too, have been hit by ransomware infections, including the Irish and New Zealand services.
One of the most infamous recent incidents was the Colonial Pipeline attack, in which hackers took down the energy supply for vast swathes of the US East Coast. The cyber security firm Elliptic claimed, in the aftermath of the attack, that operators paid the attackers a ransom of more than $5 million to restore operations.
Research published last month found that the manufacturing, health care, and finance industries saw a 300%, 200%, and 53% increase in worldwide attacks respectively over the last year.
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
