JBS ransomware breach ‘shows us we’ve got another problem,’ senator says

The recent ransomware attack on meat producer JBS has raised the specter of serious cybersecurity vulnerabilities throughout the U.S.'s most critical infrastructure, Senator Jon Tester (D-MT) told Yahoo Finance Live this week.

"The breach of JBS shows us we've got another problem," Tester said. "Not only is the marketplace severely concentrated, but now bad actors can attack this pretty easily, and JBS was a prime example. If it can happen to them, it can happen to others."

The chair of the Senate’s Defense Appropriations Committee, Tester is now calling for greater cooperation between these infrastructure companies and the government to help put a stop to the ransomware attacks crippling everything from hospitals and pipelines to the agricultural industry.

“This is about critical infrastructure for this country, whether it’s in food, whether it’s in energy, whether it’s in water,” Tester said. “And the information sharing is really, really important in all of this so that we can find out who did it, in a timely basis, and hold those people accountable. I don’t think individual businesses have the capacity to do that.”

Tester’s comments follow Wednesday’s revelation that meat producer JBS paid the hacker group behind a ransomware attack on the company $11 million in ransom in an effort to protect its systems from further cyberattacks.

'Hardest decision I made in 39 years'

The news that JBS paid the hacker group behind the attack, REvil, such a large sum comes just a day after Colonial Pipeline CEO Joseph Blount testified before the Senate Homeland Security Committee about the ransomware attack on the pipeline company.

During the hearing, Blount told the committee that the decision to pay the hacker group DarkSide more than $4 million in ransom following the attack was the “hardest decision I made in my 39 years in the energy industry.”

The increase in ransomware attacks has become a major national security concern, with FBI Director Christopher Wray drawing parallels between the increase in attacks and the need for government action to the Sept. 11 attacks. President Joe Biden, meanwhile, is expected to bring up the increase in attacks, especially from cybercriminals based in Russia, with Russian President Vladimir Putin.

FILE - In this Oct. 12, 2020 file photo, a worker heads into the JBS meatpacking plant in Greeley, Colo.  A weekend ransomware attack on the world’s largest meat company is disrupting production around the world just weeks after a similar incident shut down a U.S. oil pipeline. The White House confirms that Brazil-based meat processor JBS SA notified the U.S. government Sunday, May 30, 2021, of a ransom demand from a criminal organization likely based in Russia.  (AP Photo/David Zalubowski, File)
JBS paid an $11 million ransom after its ransomware attack. (AP Photo/David Zalubowski, File) · ASSOCIATED PRESS

Ransomware attacks occur when cybercriminals gain access to a company’s computer systems, often through security lapses, spear phishing email campaigns, or other means. Once inside of a company’s system, the criminals begin to encrypt data, locking it down and holding the information captive until the victims pay a ransom in the form of cryptocurrency.