Farmers reeling from Agco ransomware attack

Farmers have been forced to stop work during seeding as Agco’s dealer network struggles to find parts after it was hit by a ransomware attack.

Australian farmers have been left waiting for parts and equipment during seeding after an international hacking operation shut down major agricultural equipment manufacturer and distributor Agco.

Agco announced in a statement on May 6 it was subject to a ransomware attack that had affected some of its production facilities. Australian dealerships were left scrambling to find parts and manage their operations without access to internal software.

Willaura wheat and canola grower Chris Brain said his seeding program had been delayed by about eight days because his local Agco dealer had been unable to order a spare part he needed.

“It’s been a nightmare. We only want a $100 sensor. (The dealer) doesn’t know where the parts are because everything’s based on a computer system and they can’t use their computers,” he said.

Without the missing sensor, Mr Brain’s Fendt tractor, which tows his airseeder, doesn’t function as it should, he said.

“If any one sensor on any of these machines malfunctions, the engine de-rates,” he said. “Instead of 500hp, you get 100hp.”

Mr Brain, who would otherwise be nearing the end of seeding, said he was now “resigned” to getting the crop planted by the end of May.

Agco on May 16 said the majority of its production activities had resumed. Remaining sites were expected to restart operations within the week.

Hamilton-based Phillips Farm Machinery managing director Paul Lewis said on Monday “dribs and drabs” of operating systems were now beginning to come back online, but customers could expect delays of several weeks as manufacturers and suppliers worked through weeks of backlogged orders.

Mr Lewis said he had customers waiting on four new Fendt tractors he was unable to send out because “we need head office to activate unlocks and they don’t have access to their systems”.

In total, he had about 15 customers affected by delays as a result of the ransomware attack. Parts requests were now being processed after ordering systems were switched over to manual systems, he said.

Chris Brain's Fendt tractor has been out of action for eight days due to delays obtaining a replacement sensor. Picture: Chris Brain

AGRICULTURAL COMPANIES WARNED TO PREPARE FOR ATTACKS IN APRIL

In April, the US Cybersecurity and Infrastructure Security Agency warned Russian state-sponsored hackers could target vital supply chains.

The US Federal Bureau of Investigation issued a warning to agricultural companies on April 22 that ransomware attacks were more likely during crucial seeding periods.

“Ransomware actors may be more likely to attack agricultural cooperatives during critical planting and harvest seasons, disrupting operations, causing financial loss, and negatively impacting the food supply chain,” the FBI said in a statement.

“The FBI noted ransomware attacks during these seasons against six grain cooperatives during the fall (northern hemisphere autumn) 2021 harvest and two attacks in early 2022 that could impact the planting season by disrupting the supply of seeds and fertiliser.

“Cyber actors may perceive cooperatives as lucrative targets with a willingness to pay due to the time-sensitive role they play in agricultural production.

“Although ransomware attacks against the entire farm-to-table spectrum of the FA sector occur on a regular basis, the number of cyber attacks against agricultural cooperatives during key seasons is notable,” the statement said.