November 28, 2021

JBS Paid $11 Million to Resolve Ransomware Attack

JBS USA Holdings Inc. paid an $11 million ransom to cybercriminals who last week temporarily knocked out plants that process roughly one-fifth of the nation’s meat supply, the company’s chief executive said.

The ransom payment, in bitcoin, was made to shield JBS meat plants from further disruption and to limit the potential impact on restaurants, grocery stores and farmers that rely on JBS, said

Andre Nogueira,

chief executive of Brazilian meat company

JBS SA’s

U.S. division.

“It was very painful to pay the criminals, but we did the right thing for our customers,” Mr. Nogueira said Wednesday in an interview with The Wall Street Journal. He added that the payment was made after the majority of JBS plants were up and running again.

JBS is the world’s largest meat company by sales, processing beef, poultry, and pork from Australia to South America and Europe. In the U.S., the company is the biggest beef processor and a top supplier of chicken and pork. Its subsidiary

Pilgrim’s Pride Corp.

PPC 0.26%

, also hit by the attack, is the second-largest U.S. poultry processor, after

Tyson Foods Inc.

The attack on JBS was part of a wave of incursions using ransomware, in which companies are hit with demands for multimillion-dollar payments to regain control of their operating systems. The operator of a pipeline bringing gasoline to parts of the East Coast in May paid about $4.4 million to regain control of its operations and restore service. The attacks show how hackers have shifted from targeting data-rich companies such as retailers, banks and insurers to essential-service providers such as hospitals, transport operators and food companies.

Mr. Nogueira said JBS learned of the attack early on Sunday, May 30, when technology staff members noticed irregularities with the functioning of some servers. Soon they found a message demanding a ransom to reclaim access to the company’s system. Mr. Nogueira, who was traveling, said he was awakened around 5 a.m. by a phone call from his chief financial officer, notifying him of the incursion.

JBS immediately alerted the Federal Bureau of Investigation, Mr. Nogueira said, and the company’s technology team began shutting down the meat supplier’s systems to slow the attack’s advance. JBS called in technology vendors that had previously worked with the company, as well as cybersecurity experts and consultants who began negotiating with the attackers.

The FBI last week attributed the JBS attack to REvil, a criminal ransomware gang. Mr. Nogueira said that JBS and outside firms are conducting forensic analyses of its information-technology systems, and that it isn’t yet clear how the attackers accessed JBS’s systems.

JBS maintains secondary backups of all its data, which are encrypted, Mr. Nogueira said. The company brought back operations at its plants using those backup systems, he said. While the company was making good progress, he added, JBS’s technology experts cautioned the company that there was no guarantee that the hackers wouldn’t find another way to strike, and JBS’s consultants continued negotiating with the attackers. Mr. Nogueira said the company is confident that no customer, supplier or employee data was compromised in the attack, based on its forensic analysis.

“We didn’t think we could take this type of risk that something could go wrong in our recovery process,” Mr. Nogueira said of the decision to pay the attackers. “It was insurance to protect our customers.”

He said that JBS’s outside advisers negotiated the payment amount with the attackers, and that the company kept federal law-enforcement officials informed throughout the process. Mr. Nogueira declined to specify when JBS made the payment, or to identify the cybersecurity experts.

Write to Jacob Bunge at jacob.bunge@wsj.com

Copyright ©2020 Dow Jones & Company, Inc. All Rights Reserved. 87990cbe856818d5eddac44c7b1cdeb8

Appeared in the June 10, 2021, print edition as ‘JBS Paid $11 Million In Bitcoin for Ransom.’

Related Posts

Why Apple, Amazon and Spotify Are Embracing Hi-Def Music: A Guide to ‘Lossless’ Streaming

June 26, 2021

June 26, 2021

EMILY LAZAR knows better than most how great music can sound. At her New York mastering studio, the Lodge, the...

Supreme Court Rules New Jersey Can’t Block Natural-Gas Pipeline

June 29, 2021

June 29, 2021

WASHINGTON—The Supreme Court on Tuesday removed a hurdle to the construction of a natural-gas pipeline through Pennsylvania and New Jersey,...

Companies Spend Big on ESG Investments, Hoping for Long-Term Payoff

June 14, 2021

June 14, 2021

Companies are racking up hefty bills as they invest in new facilities and products to reduce emissions or meet other...

‘Friday’ Franchise Frozen as Ice Cube and Warner Bros. Fight Over New Movie

July 1, 2021

July 1, 2021

A spat between star Ice Cube and WarnerMedia has escalated into a high-stakes blame game that threatens to permanently derail...

House Bills Seek to Break Up Amazon and Other Big Tech Companies

June 11, 2021

June 11, 2021

House lawmakers proposed a raft of bipartisan legislation aimed at reining in the country’s biggest tech companies, including a bill...

New Talks on Infrastructure Face Old Problem: How to Pay for It

June 9, 2021

June 9, 2021

Discussions intensified among a group of centrist-leaning Senate Republicans and Democrats trying to strike a deal that could spend up...

Trumps Selling Prized Washington, D.C., Hotel for $375 Million

November 15, 2021

November 15, 2021

Donald Trump’s family hotel company has reached an agreement to sell the rights to its Washington, D.C., hotel for $375...

Fracking Companies Continue Consolidation as Cabot, Cimarex Form $14 Billion Firm

May 24, 2021

May 24, 2021

U.S. shale drillers Cabot Oil & Gas Corp. COG -6.01% and Cimarex Energy Co. XEC -6.42% said Monday that they...

Tesla to Store China Data Locally in New Data Center

May 26, 2021

May 26, 2021

SHANGHAI— Tesla Inc. TSLA -0.29% said all data generated from cars it sold in China will be stored in a...

Some California Homeowners Can Get Coverage Again After Wildfires

June 13, 2021

June 13, 2021

Thousands of California residents who only can buy homeowners policies through the state’s last-resort insurance program will now be eligible...

Why PCs Are Turning Into Giant Phones

June 19, 2021

June 19, 2021

Your next laptop will be like a smartphone—only bigger, more powerful and more capable. It’s a reversal of almost a...

Troubled Companies Take Page From AMC Playbook in Seeking Stock-Market Lifelines

June 20, 2021

June 20, 2021

The frenzied stock-buying activity that may have saved AMC Entertainment Holdings Inc. from bankruptcy is opening up a potential escape...

Fed Inching Toward Discussion of Slowing Bond Purchases

June 4, 2021

June 4, 2021

WASHINGTON—Friday’s jobs report keeps the Federal Reserve on track to begin informal internal discussions about reducing the pace of its...

Southwest Airlines CEO Gary Kelly to Step Down in February

June 23, 2021

June 23, 2021

Gary Kelly has served as Southwest Airlines CEO since 2004. Photo: nicholas kamm/Agence France-Presse/Getty Images Updated June 23, 2021 10:05...

Eli Lilly Covid-19 Antibody Drug Shipments Paused Over Variant Concerns

June 25, 2021

June 25, 2021

U.S. health officials have paused the distribution of two Eli Lilly LLY -1.18% & Co. Covid-19 monoclonal antibody treatments because...