By REBECCA RUTHERFORD
Los Alamos

In a less than appealing turn of events last week Dole corporation reported a massive ransomware attack.

What is ransomware? In a ransomware attack malware, a type of malicious software, is installed on your system, this then quietly runs and encrypts your operating system, or possibly just individual files. You will lose access to your system/files unless you can pay a ransom to retrieve the encryption key.

On the individual level this can be bad, at the corporate level it can be a disaster, as Dole seems to be finding out. Consumers had been reporting packaged salad shortages all last week, it is unknown exactly when the attack occurred, but seems likely related.

What do we know so far? Dole employs around 38,000 people and has an annual revenue of $6.5 billion. In a statement on its website, Dole says that it has already engaged with third-party cyber security experts to remediate the attack. Law enforcement authorities have been informed of the incident.

Dole has presented the impact as “limited,” however according to Bleeping Computer, a memo leaked on Facebook by a Texan grocery store indicates that Dole was forced to shut down production plants in North America. It appears they have also halted shipments to grocery stores.

“Dole Food Company is in the midst of a cyberattack, and [we] have subsequently shut down our systems throughout North America,” reads the memo.

“Our plants are shut down for the day, and all shipments are on hold,” the company said in the notification to its partners, according to the document posted by Bleeping Computer.

I’m not sure about y’all but I don’t know if I can handle making my salads from scratch … all kidding aside, ransomware is a serious issue. What can you do to protect yourself and your business?

Basic cyber hygiene is key. Many of these attacks get in via phishing emails. Be suspicious of incoming email or text communications. If something comes from an unknown sender, seems too good to be true, etc. it’s probably a phishing email, just delete it. Make sure that you backup important systems and files, and make sure they are accessible offline, and not dependent on your systems.

CISA offers some great resources for individuals and businesses on ransomware attacks and prevention: https://www.cisa.gov/stopransomware

Editor’s note: Rebecca Rutherford works in information technology at Los Alamos National Laboratory.