Incident: Cyber Attack Disrupts JBS Meatpacker Operations in Australia.

Published Date: 2021-06-01

Postmortem Analysis
Timeline 1. The software failure incident happened on May 30, 2021, as mentioned in Article [114991].
System The software failure incident reported in Article 114991 involved a cyber attack on the information systems of JBS SA, the world's largest meatpacker. The systems that failed in this incident were: 1. Servers supporting North American and Australian IT systems of JBS USA [114991] 2. IT and internet systems crucial for Australian meat processing operations, including JBS's Primo Smallgoods business in Queensland state [114991]
Responsible Organization 1. An organised cyber attack targeted the information systems of JBS SA, causing the software failure incident [114991].
Impacted Organization 1. Australian units of JBS SA 2. North American units of JBS SA 3. JBS USA 4. JBS Australia 5. JBS's Primo Smallgoods business in Queensland state [114991]
Software Causes 1. The failure incident was caused by an organized cyber attack on the information systems of JBS SA, affecting servers supporting its North American and Australian IT systems [114991].
Non-software Causes 1. The failure incident was caused by an organised cyber attack on the information systems of JBS SA, affecting its Australian and North American units [Article 114991].
Impacts 1. The software failure incident caused the Australian operations of JBS SA to shut down, affecting operations across several Australian states [114991]. 2. The incident led to delays in transactions with customers and suppliers due to the time required to resolve the cyber attack [114991]. 3. The normal access to IT and internet systems necessary for meat processing operations in Australia was disrupted, impacting JBS's Primo Smallgoods business in Queensland state [114991].
Preventions 1. Implementing robust cybersecurity measures such as firewalls, intrusion detection systems, and regular security audits could have potentially prevented the cyber attack on JBS SA's information systems [114991]. 2. Conducting regular cybersecurity training for employees to raise awareness about phishing attacks and other common tactics used by cybercriminals could have helped prevent the incident [114991]. 3. Ensuring timely software updates and patches are applied to all systems to address known vulnerabilities could have reduced the risk of a successful cyber attack [114991].
Fixes 1. Implementing robust cybersecurity measures to prevent future cyber attacks [114991].
References 1. JBS SA statement [114991] 2. JBS Australia Chief Executive Officer Brent Eastwood [114991] 3. Industry news website Beefcentral [114991]

Software Taxonomy of Faults

Category Option Rationale
Recurring one_organization (a) The software failure incident having happened again at one_organization: The article reports that JBS SA, the world's largest meatpacker, experienced an organized cyber attack on its information systems affecting its Australian and North American units [114991]. This incident indicates a software failure within the organization due to a cybersecurity attack. (b) The software failure incident having happened again at multiple_organization: There is no information in the provided article about a similar incident happening at other organizations.
Phase (Design/Operation) design, operation (a) The software failure incident mentioned in Article 114991 was due to an organized cyber attack on the information systems of JBS SA, affecting its Australian and North American units. This attack disrupted operations and caused the Australian operations to shut down. The incident was attributed to an organized cybersecurity attack on the servers supporting the IT systems of JBS USA, impacting both North American and Australian operations [114991]. (b) The software failure incident also had operational implications as it disrupted normal access to IT and internet systems, making meat processing operations in Australia impossible without these systems. The shutdown of operations across several Australian states, including the impact on JBS's Primo Smallgoods business in Queensland, highlights the operational disruptions caused by the cyber attack [114991].
Boundary (Internal/External) within_system (a) The software failure incident reported in Article 114991 is classified as within_system. The article mentions that JBS USA determined it was the target of an organized cybersecurity attack affecting some of the servers supporting its North American and Australian IT systems. This indicates that the failure originated from within the system itself, specifically from the cyber attack on the company's information systems [114991].
Nature (Human/Non-human) human_actions (a) The software failure incident at JBS SA was caused by an organized cyber attack on its information systems, affecting servers supporting its North American and Australian IT systems [Article 114991]. (b) The incident was a result of an organized cybersecurity attack, indicating human actions were involved in introducing the contributing factors leading to the software failure [Article 114991].
Dimension (Hardware/Software) software (a) The software failure incident reported in Article 114991 was due to an organized cyber attack on the information systems of JBS SA, the world's largest meat works. The attack affected the servers supporting its North American and Australian IT systems, leading to the shutdown of operations in Australia. This indicates that the failure originated from external factors (cyber attack) rather than internal hardware issues [114991]. (b) The software failure incident was specifically mentioned to be an organized cybersecurity attack on the IT systems of JBS USA, affecting both North American and Australian operations. The company stated that the incident would take time to resolve, potentially causing delays in transactions with customers and suppliers. This points to a software-related failure caused by the cyber attack [114991].
Objective (Malicious/Non-malicious) malicious (a) The software failure incident reported in Article 114991 was malicious in nature. The article mentions that the world's largest meat works, JBS SA, was hit by an organized cyber attack on its information systems affecting its Australian and North American units. The attack was described as an "organized cybersecurity attack" targeting the servers supporting IT systems in North America and Australia. This indicates that the failure was a result of contributing factors introduced by humans with the intent to harm the system [114991].
Intent (Poor/Accidental Decisions) accidental_decisions The software failure incident at JBS SA was due to an organized cyber attack on its information systems, affecting its Australian and North American units [114991]. This indicates that the intent behind the software failure incident was likely 'accidental_decisions' as it was caused by external malicious actors rather than poor internal decisions.
Capability (Incompetence/Accidental) accidental (a) The software failure incident reported in Article 114991 was not attributed to development incompetence. The incident was described as an organized cyber attack on the information systems of JBS SA, affecting its Australian and North American units. This indicates that the failure was a result of a deliberate external attack rather than incompetence within the development organization. (b) The software failure incident in Article 114991 was due to an accidental cyber attack on JBS SA's information systems. The company stated that it was the target of an organized cybersecurity attack affecting its IT systems in North America and Australia. This indicates that the failure was not accidental but rather a deliberate attack on the company's systems.
Duration temporary The software failure incident reported in Article 114991 was temporary. The incident caused the Australian operations of JBS SA to shut down, but the company was actively working to resolve the issue. The resolution of the incident was expected to take time, potentially delaying certain transactions with customers and suppliers. The article mentioned that the attack shut down operations across several Australian states, indicating a temporary disruption rather than a permanent failure [114991].
Behaviour crash, other (a) crash: The software failure incident in this case can be categorized as a crash. The article mentions that the cyber attack on JBS SA's information systems caused its Australian operations to shut down, indicating a failure due to the system losing state and not performing its intended functions [Article 114991]. (b) omission: The article does not provide specific information indicating a failure due to the system omitting to perform its intended functions at an instance(s). (c) timing: The article does not mention any issues related to the system performing its intended functions correctly but too late or too early. (d) value: The article does not specify any details suggesting a failure due to the system performing its intended functions incorrectly. (e) byzantine: The article does not describe the system behaving erroneously with inconsistent responses and interactions. (f) other: The other behavior observed in this software failure incident is the disruption of normal operations across several Australian states and the impact on transactions with customers and suppliers due to the cyber attack on JBS SA's IT systems [Article 114991].

IoT System Layer

Layer Option Rationale
Perception None None
Communication None None
Application None None

Other Details

Category Option Rationale
Consequence property, delay, non-human, theoretical_consequence The consequence of the software failure incident reported in Article 114991 was a delay in certain transactions with customers and suppliers due to the cyber attack on JBS SA's information systems. The incident caused the Australian operations to shut down, impacting meat processing operations across several Australian states and affecting JBS's Primo Smallgoods business in Queensland state. The resolution of the incident was expected to take time, potentially leading to delays in normal operations [114991].
Domain manufacturing, health (a) The failed system was intended to support the meat processing industry. The software failure incident affected the operations of JBS SA, the world's largest meatpacker, in Australia and North America [Article 114991].

Sources

Back to List