Wednesday December 8th, 2021 8:16AM

Largest meat producer getting back online after cyberattack

By The Associated Press
Related Articles
  Contact Editor

DETROIT (AP) — The world's largest meat processing company has resumed most production after a weekend cyberattack, but experts say the vulnerabilities exposed by this attack and others are far from resolved.

In a statement late Wednesday, the FBI attributed the attack on Brazil-based meat processor JBS SA to REvil, a Russian-speaking gang that has made some of the largest ransomware demands on record in recent months. The FBI said it will work to bring the group to justice and it urged anyone who is the victim of a cyberattack to contact the bureau immediately.

REvil has not posted anything related to the hack on its dark web site. But that’s not unusual. Ransomware syndicates as a rule don’t post about attacks when they are in initial negotiations with victims — or if the victims have paid a ransom.

In October, a REvil representative who goes by the handle “UNKN” said in an interview published online that the agriculture sector would now be a main target for the syndicate. REvil also threatened to auction off sensitive stolen data from victims who refused to pay it.

The attack targeted servers supporting JBS’s operations in North America and Australia. Backup servers weren’t affected and the company said it was not aware of any customer, supplier or employee data being compromised.

JBS said late Wednesday said that it expects to resume production at all its plants on Thursday and be running at “close to full capacity” across its global operations.

It is not known if JBS paid a ransom. The company hasn’t discussed it in public statements, and did not respond to phone and email messages Wednesday seeking comment.

The FBI and the White House declined to comment on the ransom. White House Press Secretary Jen Psaki said Wednesday the U.S. is considering all options in dealing with the attack and that President Joe Biden intends to confront Russia's leader, Vladimir Putin, about his nation's harboring of ransomware criminals when the two meet in Europe in two weeks.

“I can assure you that we are raising this through the highest levels of the U.S. government,” she said. “The president certainly believes that President Putin has a role to play in stopping and preventing these attacks.”

While there is no evidence Russia benefits financially from ransomware crime — which has hit health care, education and state and local governments especially hard during the pandemic — U.S. officials say its practitioners have sometimes worked for Kremlin security services.

Ransomware expert Allan Liska of the cybersecurity firm Recorded Future said JBS was the largest food manufacturer yet to be hit by ransomware, in which criminal hackers paralyze entire networks by scrambling their data. But he said at least 40 food companies have been targeted by ransomware gangs over the last year, including brewer Molson Coors and E & J Gallo Winery.

Food companies, Liska said, are at “about the same level of security as manufacturing and shipping. Which is to say, not very.”

The attack was the second in a month on critical U.S. infrastructure. Earlier in May, hackers believed to operate with impunity in Russia and allied states shut down operation of the Colonial Pipeline, the largest U.S. fuel pipeline, for nearly a week. The closure sparked long lines and panic buying at gas stations across the Southeast. Colonial Pipeline confirmed it paid $4.4 million to the hackers, who then turned over a software decryption key.

Cybersecurity experts said the attacks targeting critical sectors of the U.S. economy are evidence that industry hasn’t been taking years of repeated warnings seriously.

Cybercriminals previously active in online ID theft and bank fraud moved into ransomware in the mid-2010s as programmers developed sophisticated programs that permitted the software’s more efficient dissemination.

The ransomware scourge reached epidemic dimensions last year. The firm CrowdStrike observed over 1,400 ransomware and data extortion incidents in 2020. Most targeted manufacturing, industrials, engineering and technology companies, said Adam Meyers, the company’s vice president of intelligence.

“The problem has been spiraling out of control,” said John Hultquist, who heads intelligence analysis at FireEye. “We’re already deep into a vicious cycle.”

Hultquist said ransomware syndicates are going after more critical and visible targets because they’ve invested heavily in identifying “whales” - companies they think will yield big ransoms.

JBS is the second-largest producer of beef, pork and chicken in the U.S. If it were to shut down for even one day, the U.S. would lose almost a quarter of its beef-processing capacity, or the equivalent of 20,000 beef cows, according to Trey Malone, an assistant professor of agriculture at Michigan State University.

Mark Jordan, who follows the meat industry as the executive director of Leap Market Analytics, said the disruption to the food supply will likely be minimal in this case. Meat has around a 14-day window to move through the market, he said. If a plant is closed for a day or two, companies can usually make up for lost production with extra shifts.

“Several plants owned by a major meatpacker going offline for a couple of days is a major headache, but it is manageable assuming it doesn’t extend much beyond that,” he said.

Jordan said a closure that runs closer to a week would be more serious, especially for a company like JBS, which controls around one-fifth of the country's beef, pork and chicken supply.

Critical U.S. infrastructure might be better hardened against ransomware attacks were it not for the 2012 defeat of legislation that would have set cybersecurity standards for critical industries.

The U.S. Chamber of Commerce and other business groups lobbied hard against the bill, condemning it as government interference in the free market. Even a watered-down version that would have made the standards voluntary was blocked by a Republican filibuster in the Senate.

Right now, the U.S. has no cybersecurity requirements for companies outside of the electric, nuclear and banking systems, said David White, president of the cyber risk management company Axio.

White said regulations would help, particularly for companies with inadequate or immature cybersecurity programs. Those rules should be sector-specific and should consider the national economic risks of outages, he said.

But he said regulations can also have an unintentional negative effect. Some companies might consider them the ceiling — not the starting point — for how they need to manage risk, he said.

"Bottom line: regulation can help, but it is not the panacea,"' White said.

JBS plants in Australia resumed limited operations Wednesday in New South Wales and Victoria states, Agriculture Minister David Littleproud said. The company hoped to resume work in Queensland state on Thursday, he said.

JBS, which is a majority shareholder of Pilgrim’s Pride, didn’t say which of its 84 U.S. facilities were closed Monday and Tuesday because of the attack. It said JBS USA and Pilgrim’s were able to ship meat from nearly all facilities Tuesday. Several of the company’s pork, poultry and prepared foods plants were operational Tuesday and its Canada beef facility resumed production, it said.

The plant closures reflect the reality that modern meat processing is heavily automated, for both food- and worker-safety reasons. Computers collect data at multiple stages of the production process; orders, billing, shipping and other functions are all electronic.


Bajak reported from Boston. AP Writers Rod McGuirk in Canberra, Australia; Alan Suderman in Richmond, Virginia; and Nancy Benac, Eric Tucker and Alexandra Jaffe in Washington contributed to this report.

  • Associated Categories: U.S. News, Associated Press (AP), AP National News, AP Online National News, Top U.S. News short headlines, Top General short headlines, AP World News, AP Business, AP Business - Corporate News, AP Business - Industries, AP Business - Agriculture, AP Business - Utilities, AP Technology News
© Copyright 2021 AccessWDUN.com
All rights reserved. This material may not be published, broadcast, rewritten, or redistributed without permission.
Largest meat producer getting back online after cyberattack
The world’s largest meat processing company is getting back to work after production around the world was disrupted by a cyberattack just weeks after a similar incident shut down a U.S. oil pipeline
6:32AM ( 6 minutes ago )
Germany welcomes EU tax transparency deal for big companies
Germany’s finance minister has welcomed an agreement requiring large companies in the European Union to reveal how much tax they paid in which country
6:18AM ( 20 minutes ago )
Iran's largest warship catches fire, sinks in Gulf of Oman
The largest warship in the Iranian navy has caught fire and sank in the Gulf of Oman under unclear circumstances
6:14AM ( 24 minutes ago )
Associated Press (AP)
2 Russian crew do spacewalk at International Space Station
Two Russian members of the International Space Station crew are conducting a spacewalk
4:32AM ( 2 hours ago )
Iran's largest navy ship catches fire, sinks in Gulf of Oman
The largest ship in the Iranian navy has caught fire and sank in the Gulf of Oman under unclear circumstances
2:52AM ( 3 hours ago )
Eye exams seek to improve outlook for rural Romanian kids
Sometimes a simple test can change a life
2:32AM ( 4 hours ago )
AP National News
Firefighter kills colleague, wounds another at fire station
Authorities say an off-duty Los Angeles County firefighter fatally shot a fellow firefighter and wounded another at their fire station before going to his nearby home, setting it on fire and apparently killing himself
11:10PM ( 7 hours ago )
Meat producer JBS says expects most plants working Wednesday
A ransomware attack on the world’s largest meat processing company disrupted production around the world just weeks after a similar incident shut down a U.S. oil pipeline
8:46PM ( 9 hours ago )
New Mexico congressional election tests Democrats' dominance
A special congressional election in New Mexico is testing political enthusiasm among Democrats in an increasingly progressive district last won by a Republican in 2006
8:32PM ( 10 hours ago )
Top U.S. News short headlines
Australian power generator takes Greenpeace to court
Australia’s largest electricity generator AGL Energy has taken Greenpeace to court alleging breaches of copyright and trademark laws by the environmental group
4:41AM ( 1 hour ago )
Russian upper house votes to exit from overflight treaty
The Russian parliament’s upper house has voted to withdraw from an international treaty allowing surveillance flights over military facilities following the U.S. exit from the pact
4:31AM ( 2 hours ago )
Asian shares mixed after lackluster day on Wall Street
Asian shares are mixed after Wall Street reopened from the Memorial Day holiday on a lackluster note
3:04AM ( 3 hours ago )
AP Business
Trial to determine if GEO must pay detainees minimum wage
After nearly four years of litigation and pandemic-related delays, a trial is underway to determine whether the GEO Group must pay minimum wage to detainees who perform cooking, cleaning and other tasks at its Northwest immigration detention center in Washington state
9:09PM ( 9 hours ago )
The Latest: Mexico ups official COVID death toll to 227,840
Mexico says a clinical review of past deaths has led officials to raise the country’s confirmed COVID-19 death toll by 4,272, to a total of 227,840
8:43PM ( 9 hours ago )
The Latest: Alaska offers vaccinations for airport arrivals
Alaska has begun offering coronavirus vaccinations at airports in a move that had been expected for the start of the summer travel season
7:14PM ( 11 hours ago )
AP Business - Corporate News
Biden suspends oil leases in Alaska's Arctic refuge
The Biden administration has suspended oil and gas leases in Alaska’s Arctic National Wildlife Refuge
7:38PM ( 11 hours ago )
Sinovac vaccine restores a Brazilian city to near normal
A city of 46,000 in Brazil is giving hope to millions of people taking the COVID-19 shot developed by Chinese pharmaceutical company Sinovac
3:03PM ( 15 hours ago )
The Latest: Canada OKs vaccine change between 1st, 2nd dose
Canada’s National Advisory Committee on Immunization says people who got the Oxford-AstraZeneca vaccine for the first dose can be offered either Pfizer-BioNTech or Moderna for the second
3:00PM ( 15 hours ago )
AP Business - Industries
JBS cyberattack disrupts Australian meat production
Thousands of Australian meat workers have had no work for a second day after a cyberattack crippled the world’s largest meat processing company
5:09AM ( 1 day ago )
Plague of ravenous, destructive mice tormenting Australians
At night, the floors of sheds vanish beneath carpets of scampering mice
7:10AM ( 4 days ago )
USDA rejects request for faster pork slaughterhouse speeds
The U.S. Department of Agriculture has declined a request by the pork industry to increase the speed at which pigs can be processed into meat
3:22PM ( 5 days ago )
AP Business - Agriculture
OPEC to increase oil output as global economy recovers
The OPEC oil cartel and allied producing countries have confirmed their plans to return 2.1 million barrels per day of oil output, balancing fears that continuing COVID-19 outbreaks in some countries will sap demand against rising demand from recovering economies around the globe
12:22PM ( 18 hours ago )
In Brazil's Amazon, rivers rise to record levels
Rivers around the biggest city in Brazil's Amazon rainforest are swelling to levels unseen in over a century of record-keeping
11:55AM ( 18 hours ago )
Stocks rise following strong report on US manufacturing
Stocks were mostly higher Tuesday morning as investors returned from a three-day holiday weekend in the U
11:47AM ( 18 hours ago )
AP Business - Utilities
Can virtual reality help seniors? Study hopes to find out
A California university and a Florida senior community are teaming up to see whether virtual reality can help the emotional well-being of older people
6:20PM ( 12 hours ago )
US seizes 2 domain names used in cyberespionage campaign
The Justice Department says it has seized two domain names used in a cyberespionage campaign that targeted U.S. and foreign government agencies, think tanks and humanitarian groups
4:18PM ( 14 hours ago )
Huawei ex-director on trial in Poland on China spying charge
Two men accused of spying for China have gone on trial in Poland's capital
3:11PM ( 15 hours ago )
AP Technology News
Germany welcomes EU tax transparency deal for big companies
Germany’s finance minister has welcomed an agreement requiring large companies in the European Union to reveal how much tax they paid in which country
6:18AM ( 22 minutes ago )
Iran's largest warship catches fire, sinks in Gulf of Oman
The largest warship in the Iranian navy has caught fire and sank in the Gulf of Oman under unclear circumstances
6:14AM ( 26 minutes ago )
Leibovitz photo fronts memoir by business leader Indra Nooyi
After decades of photographing rock stars, movie stars and heads of state, Annie Leibovitz has added a business leader to her portfolio, former PepsiCo CEO Indra Nooyi
6:06AM ( 34 minutes ago )
Leibovitz photo of Indra Nooyi to appear on Nooyi's memoir
After decades of photographing rock stars, movie stars and heads of state, Annie Leibovitz has added a business leader to her portfolio, former PepsiCo CEO Indra Nooyi
6:01AM ( 39 minutes ago )
Women's soccer saw significant disruption from pandemic
The coronavirus outbreak brought significant disruption to women’s soccer around the world with some players going without competition for as many as 250 days
6:01AM ( 39 minutes ago )