Cyberattack shuts down Mackay Sugar mills in Queensland and halts cane harvest

A cyberattack forced Mackay Sugar, one of Australia's largest sugar producers, to shut down two mills in Queensland and stop sugarcane harvesting in the Mackay region. The company said the incident affected parts of its operations and that cybersecurity experts and authorities are investigating while systems are restored. No ransomware claim, data-theft disclosure, or technical details about the intrusion method have been confirmed yet.
Why it matters: This is a real-world operational technology and business disruption incident affecting food production and local growers, not just office IT. Organizations in agriculture and other industrial sectors should review incident response plans, segmentation between business and plant systems, and contingency procedures for outages.

Sources

Australian sugar producer works to restore operations as ransomware group claims attack
2026.06.18 95% relevant
This article is a direct update on the same Mackay Sugar incident, adding that the Gentlemen ransomware group has claimed responsibility, that Mackay Sugar found evidence an external party accessed parts of its IT environment, and that the company is assessing whether data was stolen while working to resume harvesting.
Cyberattack sees crops kept in the ground
2026.06.17 97% relevant
This article is a direct update on the same Mackay Sugar incident, adding operational detail that farmers were told to keep cane in the ground, that Farleigh Mill resumed limited manual crushing, that Racecourse and Farleigh were affected while Marian was not, and that The Gentlemen claimed responsibility on its leak site.
Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer
Eduard Kovacs 2026.06.15 99% relevant
This article is a direct update on the same Mackay Sugar incident, adding that The Gentlemen ransomware group has claimed the attack, that two mills were impacted, manual crushing resumed at one site, and that restoration of cane supply, harvesting, and mill systems was still underway as of June 15.
Cyberattack shuts down major Australian sugar mills, disrupting harvest
2026.06.10 100% relevant
This article establishes the incident itself: a newly disclosed cyberattack on Mackay Sugar that shut down Farleigh and Racecourse mills and interrupted harvest operations.
← Back to all stories