Agriculture & Food — Cyber Threat Activity
Threat actors, incidents and malware targeting the Agriculture & Food sector — 572 recorded incidents and 69 tracked groups.
- Recorded incidents: 572
- Incidents, trailing 180 days: 179
- Tracked threat actors: 69
- Malware families: 8
Recent incidents
- Woodside Ranch 2026-08-06
- kioti.com 2026-08-05
- Agricultural Chemical Solutions 2026-08-04
- multiaqua.com 2026-08-03
- The Dcoop 2026-07-31
- Acosta Sons 2026-07-31
- Db Tarimsal Enerji 2026-07-30
- Coca-Cola / Fairlife 2026-07-27
- Gloria Maris Groupe 2026-07-23
- Herbahaz 2026-07-23
- Postres Reina 2026-07-21
- Nichirei 2026-07-21
- Fairlife / Coca-Cola 2026-07-20
- Famesa 2026-07-19
- vedan corp 2026-07-18
- pokka.co 2026-07-18
- V&P Nurseries 2026-07-18
- Heartland Catfish 2026-07-18
- Cafar 2026-07-17
- Vignobles Toutigeac 2026-07-16
Threat actors targeting Agriculture & Food
- Qilin 77 incidents
- Akira 67 incidents
- LockBit 40 incidents
- Play Ransomware 40 incidents
- RansomHub 39 incidents
- The Gentlemen 26 incidents
- Cl0p 25 incidents
- DragonForce 24 incidents
- INC Ransom 19 incidents
- Lynx Ransomware 16 incidents
- Medusa Ransomware 16 incidents
- Black Basta 15 incidents
- SafePay 13 incidents
- Meow 12 incidents
- Cactus 11 incidents
- 8Base 10 incidents
- Hunters International 8 incidents
- Sarcoma 7 incidents
- Fog Ransomware 6 incidents
- KillSec 6 incidents
- NightSpire 6 incidents
- APT73 5 incidents
- BlackSuit 5 incidents
- RansomHouse 5 incidents
Where these victims are
- United States 217
- Canada 36
- France 23
- Italy 23
- Spain 21
- United Kingdom 21
- Germany 19
- Brazil 12
- Argentina 11
- Japan 11
- Netherlands 11
- Australia 9
Malware used against Agriculture & Food
Families used by the threat actors that target this sector, derived from actor tooling rather than observed in these incidents directly.
- Cobalt Strike Malware
- Mimikatz Tool
- PsExec Tool
- AdFind Tool
- Arp Tool
- BlackByte 2.0 Ransomware Malware
- BlackByte Ransomware Malware
- Exbyte Malware
Coverage. 76.7% of incidents in our log carry a sector classification; the remainder name a victim we have not placed in an industry. Counts here are a floor, not a total, and are not comparable between sectors of different sizes.