Ransomware attacks hit French farms

In 2025, 265 agricultural operations in France were victims of ransomware attacks, according to statistics revealed on October 6 during a conference at the Livestock Summit, organized by the Regional Agricultural Chamber. These attacks resulted in data being fully encrypted and rendered inaccessible, with ransom demands issued to unlock the data.

Agriculture faces rising cyber threats

The agricultural sector, which is often perceived as less vulnerable to cyber threats, is now experiencing a significant rise in cyber incidents. According to the statistics, 39 percent of small and medium-sized enterprises experienced a cyber incident last year.

Cyberattacks on farms are common

Despite the perception that agricultural data is not a target for hackers, a recent experiment by Recym, a network of cybersecurity experts, demonstrated otherwise. They set up a honeypot by launching a fake website for an agricultural operation without any security measures. Within 21 days, the site received 700,000 attack attempts, highlighting the vulnerability of such operations.

Phishing and AI-driven attacks grow

Phishing remains one of the most common attack vectors, with cybercriminals using text messages, emails, and fraudulent phone calls to deceive victims into sharing personal and banking information. The use of AI has further amplified these threats, enabling cyberattacks to be automated and professionalized.

Attackers are organized and global

Sébastien Pochon, a member of the Recym Aura cell, noted that the perpetrators of these attacks are no longer individual hackers but often organized structures operating on an international scale.

Experts recommend basic security steps

To mitigate these risks, experts recommend several measures. First, using different passwords for each service, with sufficient length and avoiding references to the company name or birth dates, is crucial. Password managers and two-factor authentication systems are recommended for added security.

Backups and updates are essential

Regular backups of data on both cloud servers and external drives are essential, along with accepting software updates to close security gaps. Protecting devices from mixed use for personal and professional purposes, being cautious about unknown USB keys and software, and ensuring devices are not left unlocked are also important.

Cracked software increases risk

The use of cracked software, as highlighted by Mickaël Villain, a Cybersecurity Project Manager at the Regional Digital Campus, can be a significant risk, as demonstrated by the situation in Ukraine where cracked software was exploited by Russian forces.

Connected farm devices are vulnerable

Connected devices such as collars, milking robots, feed pushers, surveillance cameras, and GPS systems can also pose vulnerabilities, as they often emit data externally, increasing the attack surface. Manufacturers have been found to have sent data to foreign countries without the knowledge of users, underscoring the need for temporary access during maintenance and subsequent closure.

Stay alert to suspicious requests

Experts emphasize the importance of being "paranoid" about any communication requesting urgent action, such as account suspension, payment rejections, or changes to bank details. Avoiding suspicious links and updating access permissions for interns or seasonal workers are also recommended.

Most risks can be reduced with care

With these "digital hygiene" measures, 80 percent of the risks can be mitigated. The remaining 20 percent necessitate a survival plan in case of an attack.