Loading...
Loading...
Attackers know that grain cooperatives can't wait. They strike during planting and harvest seasons, when every day matters—and demand millions while food supply chains hang in the balance.
FBI Warning
"Historically, ransomware actors may be more likely to attack agricultural cooperatives during critical planting and harvest seasons, disrupting operations, causing financial loss and negatively impacting the food supply chain."
— FBI IC3 Advisory
Attacker's Warning
The attackers claimed the attack could "significantly impact the public supply of grain, pork, and chicken"—demonstrating they understood the supply chain consequences.
Between September 15 and October 6, 2021 alone, six grain cooperatives experienced ransomware attacks—all during critical harvest season.
Systems supporting 40% of grain production threatened. Feed schedules for 11 million farm animals at risk. Warned attack could 'significantly impact the public supply of grain, pork, and chicken.'
8 grain elevators, 25 million bushels capacity affected. Computer systems infected. Credit card payments disabled. Drivers using hand-written tickets for grain delivery.
Operations disrupted across multiple states during critical agricultural period.
Cyber actors perceive cooperatives as lucrative targets with a willingness to pay due to the time-sensitive role they play in agricultural production.
A significant disruption of grain production could impact the entire food chain, since grain is consumed by humans and used for animal feed.
Significant disruptions can impact commodities trading and stocks—giving attackers leverage for larger ransom demands.
Attackers strike during planting and harvest when every day counts and cooperatives can't afford downtime.
Maintain air-gapped backups that ransomware can't reach. Test restoration regularly.
Document how to run operations without computers. Train staff on paper-based processes.
Extra vigilance during critical seasons when attackers know you can't afford downtime.
Understand what's covered, what's not, and what conditions apply before an incident.
Know who to call, what to do, and how to communicate during an attack.
Separate business systems from operational technology. Limit what attackers can reach.
Take our free security audit to assess your cooperative's vulnerabilities and get recommendations for ransomware protection.