JBS pays $11 million ransom following cyber attack
The White House says a Russian state-backed hacking group was behind the ransomware attack
JBS Foods has paid an $11 million (£7.8 million) ransom to hackers who had compromised its IT systems late last month, the firm confirmed on Wednesday.
The company, which is the largest processor of meat in the world and produces close to a quarter of the US' beef, fell victim to a ransomware attack orchestrated by unknown actors on 30 May. The firm was forced to suspend all affected systems and, in some areas, shut down production for 24 hours.
On 3 June, JBS announced that the attack had been resolved and that all of its systems were operational again, adding that there was no evidence to suspect that "any customer, supplier or employee data [had] been compromised or misused as a result of the situation".
Despite the attack coming to an end, the company has now confirmed that it had made a ransom payment to the attackers, totalling $11 million (£7.8 million) in Bitcoin.
JBS US CEO Andre Nogueira described the decision as a "difficult" one to make.
"However, we felt this decision had to be made to prevent any potential risk for our customers," he added.
JBS also confirmed in a statement that "at the time of payment, the vast majority of the company's facilities were operational".
The decision had been reached in consultation with JBS' internal IT professionals as well as third-party cyber security experts in order to "mitigate any unforeseen issues related to the attack and ensure no data was exfiltrated."
However, it also reiterated that "preliminary investigation results confirm that no company, customer or employee data was compromised" in the attack.
RELATED RESOURCE
Defend your organisation from evolving ransomware attacks
Learn what it takes to reduce risk and strengthen operational resiliency
Last week, the White House attributed blame for the attack to a Russian state-backed hacking group, described by the FBI as "one of the most specialised and sophisticated cybercriminal groups in the world".
This prompted President Joe Biden to issue a warning to Russia on Thursday:
"The United States will respond in a robust and meaningful way if the Russian government engages in harmful activities," he said as he arrived in the UK for the G7 summit, as part of his first overseas trip as president.
-
Companies are still paying ransoms to cyber criminals despite official adviceNews A Proofpoint survey found evolving ransomware techniques and the use of AI is exacerbating the situation for victims
-
This one cyber crime group accounted for nearly a fifth of all ransomware attacks in JuneNews The Gentlemen, a ransomware a service operator, now accounts for 17% of published attacks
-
Working with the enemy: Ransomware negotiator-turned cyber criminal jailed after working with hackers to extort clientsNews Angelo Martino was supposed to be negotiating on behalf of victims, but was secretly working for ransomware operators
-
Hackers are posing as Interpol to target small businesses – here's what you need to knowNews Small businesses are warned to think twice before clicking on links
-
‘Every hour ransomware goes undetected drastically increases its potential blast radius’: Hackers are breaching networks and laying low for longer – and nearly half of firms don’t realize until data is stolenNews An ExtraHop survey found more intrusions are going undetected, leading to longer dwell times
-
Ransomware cartels are fragmenting into volatile splinter groups, warns Met Police cyber chiefNews Commoditized "cyber crime bazaars" and AI data mining are forcing law enforcement to rewrite its playbook
-
New ransomware threat group, The Gentlemen, has become one of the most active ransomware operators, accounting for 10% of all attacksNews NTT researchers warn that the RaaS group is leveraging SystemBC malware to establish covert tunnelling, evade detection, and support rapid lateral movement across enterprise environments
-
Instructure chose to a pay ransom following the Canvas cyber attack – research shows more than half of security leaders would follow suitAnalysis Opting to pay ransoms creates huge risks for enterprises – you’re relying on the word of criminals
