JBS paid $11 million in ransomware attack, company says

JBS USA, subsidiary of Brazilian firm JBS SA (JBSS3.SA), said in a statement on Wednesday that the company paid an $11 million ransom in a cyberattack that disrupted much of its North American and Australian operations.

The world’s largest meat producer canceled shifts at its U.S. and Canadian meat plants last week, after the cyberattack that threatened to disrupt food supply chains and inflate food prices.

The Brazilian meatpacker’s arm in the United States and Pilgrims Pride Corp (PPC.O), a U.S. chicken company mostly owned by JBS, lost less than one day’s worth of food production.

Third parties are carrying out forensic investigations and no final determinations have been made, the company said. No company, customer or employee data was compromised in the attack, it said.

A Russia-linked hacking group is behind the cyberattack against JBS, a source familiar with the matter said last week. The Russia-linked cyber gang goes by the name REvil and Sodinokibi, the source said.

The cyberattack followed one last month by a group with ties to Russia on Colonial Pipeline, the largest fuel pipeline in the United States, which disrupted fuel delivery for several days in the U.S. Southeast.

FBI Director Christopher Wray said last week that the agency was investigating about 100 different types of ransomware, many of which trace back to people living in Russia.

Our Standards: The Thomson Reuters Trust Principles.