Saved
Scandals · Strategy

JBS S.A. ransomware attack

JBS didn’t get hacked — it got priced.

Worth your time?4.5/5Yes.Study the whole thing.What works, what does not, who it is for ↓
10:56in productionCh. 1 · What broke/ 10:56 · ceiling 15 min
4 chapters · 10:56Ceiling 15:00

The brief is written and checked. The video joins this page when it is cut.4 chapters · 1 min read · 10:56 planned

Read the brief

JBS S.A. is the world’s largest meat processor by sales. On May 30, 2021, ransomware disabled its beef and pork slaughterhouses in the US, Canada, and Australia. It paid $11 million in Bitcoin. The White House attributed the attack to a Russian organisation; news outlets named REvil. REvil did not claim responsibility before its infrastructure vanished on July 13, 2021.

Chapters & takeaways4
  1. 0:52
    What broke

    The attack disabled beef and pork slaughterhouses across three countries.

  2. 2:26
    Why it mattered

    JBS is the world’s largest meat producer by sales — supplying one-fifth of global meat.

  3. 4:32
    What it cost

    JBS paid $11 million in Bitcoin — a cost of doing business, not a defeat.

  4. 6:18
    Who did it

    The White House blamed a Russian group; news outlets named REvil — though REvil never claimed it.

1 more chapterFewer chapters
Worth your time?

Yes. Study the whole thing.

4.5/ 5
What works
  • exposes the price of consolidation
  • shows ransom payment as budgeted contingency
  • links geopolitical attribution to operational impact
What does not
  • treats a funding round as a result
  • uses unverified figures
  • praises without reason
  • invents facts
Study it if
  • executives responsible for industrial IT resilience
  • regulators assessing critical infrastructure risk
  • investors evaluating concentration risk in commodity supply chains
Skip it if
  • those seeking reassurance about corporate cyber readiness
  • anyone expecting technical forensics or mitigation detail
Who should study it, and who should skipHide who it is for
The written brief1 min read

What the company or idea is

JBS S.A. is a Brazil-based meat processor — the world’s largest producer of beef, chicken, and pork by sales — whose 2021 ransomware attack exposed systemic cyber risk in global food supply chains.

How it actually makes money

JBS S.A. makes money by slaughtering and processing beef, chicken, and pork for global sale. It supplies approximately one-fifth of the world’s meat.

What works

JBS resumed operations quickly after paying the ransom. Its scale allowed it to absorb the cost as a line item — $11 million is less than 0.1% of its annual revenue — and avoid prolonged disruption to customers or markets.

What does not

JBS’s cybersecurity posture did not withstand a targeted ransomware attack. Its slaughterhouses in the US, Canada, and Australia were disabled. The company paid $11 million in Bitcoin without public evidence of data recovery or system restoration.

What to take from it

The attack was not an anomaly but a predictable outcome of centralised, digitally interconnected industrial operations with under-invested security. Payment was a business continuity decision, not a concession.

Is it worth your time

Yes — because it reveals how consolidation in critical infrastructure creates single points of failure that attackers exploit, and how ransom payments become operational costs rather than exceptions.

Same desk · Scandals4 of 22
9:33
Allianz1890Allianz is a German multinational financial services company founded in Munich in 1889, with core businesses in insurance and asset management. It is the world's largest insurance company and the largest financial services company in Europe. It was a major supporter of the Nazi movement and insured Auschwitz. In April 2001, it agreed to acquire the remaining 80% of Dresdner Bank for US$20 billion. It sold Dresdner Bank to Commerzbank in November 2008.
11:51
Theranos2003Theranos claimed to replace central labs with portable, accurate, fingerstick blood testing. It did not. It used conventional machines. Its own devices produced unreliable results — so unreliable it voided two years of output. Federal regulators revoked its licence. Its founders were convicted of fraud. Its investors lost everything. Its story is not about ambition or disruption. It is about deception enabled by silence, deference, and misaligned incentives.
9:15
EnronKenneth Lay & Jeffrey Skilling · 1985Enron was an American energy, commodities and services company founded in 1985 through a merger. It grew into a major electricity, natural gas, communications, and pulp and paper company — then collapsed due to institutionalised, systematic accounting fraud. Its 2001 bankruptcy was the largest fraud-related bankruptcy in U.S. history. It reorganised as Enron Creditors Recovery Corp. in 2004.
10:15
TheranosElizabeth Holmes · 2003Theranos was a health technology company founded in 2003 in Palo Alto, California, that falsely claimed to perform rapid, accurate blood tests using minimal blood volume via proprietary devices; investigations revealed it relied on conventional machines, produced inaccurate results, voided two years of Edison data, and misrepresented its capabilities to investors, partners, and regulators.
Up next in Business

K+S

1889 · 13:52

Europe’s largest potash supplier is not too big to fall off the DAX.

13:52