JBS plant workers in U.S. scheduled to return to work after ransomware attack

RIO DE JANEIRO, BRAZIL – (REUTERS) JBS SA employees were scheduled to return to U.S. meat plants on Wednesday, a day after the company’s beef operations stopped following a ransomware attack.

A notorious Russia-linked hacking group is behind the cyberattack against JBS that disrupted meat production in North America and Australia, Bloomberg News reported, citing sources.

Brazil’s JBS controls about 20% of the slaughtering capacity for U.S. cattle and hogs, so the plants’ reopening should prevent a severe supply chain disruption at a time consumers are already facing high meat prices and general food inflation.

JBS, the world’s largest meatpacker, said on Tuesday night it had made “significant progress in resolving the cyberattack.” The “vast majority” of the company’s beef, pork, poultry and prepared foods plants will be operational on Wednesday, according to a statement.

The cyberattack on JBS followed one last month by a group with ties to Russia on Colonial Pipeline, the largest fuel pipeline in the United States, which crippled fuel delivery for several days in the U.S. Southeast. read more

The cyber gang goes by the name REvil or Sodinokibi, Bloomberg said.

Multiple ransomware groups such as REvil had said they were shutting down or scaling back operations in May as the U.S. government ramped up pressure after the Colonial hack, saying they would steer clear of government, nonprofit, or healthcare sectors.

With North American operations headquartered in Greeley, Colorado, JBS sells beef and pork under the Swift brand, with retailers like Costco Wholesale (COST.O) carrying its pork loins and tenderloins.

U.S. beef and pork prices are already rising as China increases imports, animal feed costs rise and slaughterhouses have confronted a labor shortage since Covid-19 outbreaks shut down many U.S. meat plants.

JBS also owns most of chicken processor Pilgrim’s Pride Co, which sells organic chicken under the Just Bare brand.

The company’s operations in Brazil, Mexico and the United Kingdom were not affected by the attack, JBS has said.

JBS canceled an early shift on Wednesday at its beef plant in Greeley, but a later shift was scheduled to resume normally, representatives of the United Food and Commercial Workers International Union Local 7 said in an email. A JBS beef plant in Grand Island, Nebraska, told its workers on Facebook it would resume normal schedules in all departments.

Chicago Mercantile Exchange (CME) cattle futures rose on Wednesday after tumbling on Tuesday as the JBS plant shutdowns prevented farmers from delivering their cattle to slaughter plants.

Over the past few years, ransomware has evolved into a pressing national security issue. A number of gangs, many of them Russian speakers, develop the software that encrypts files and then demand payment in cryptocurrency for keys that allow the owners to decipher and use them again.