In 2021, the information threat vectors and attack surfaces of the agriculture sector were further exposed after a ransomware attack on meat producer JBS Foods disrupted the nation’s food supply chains. Two pieces of legislation were introduced in the Senate last week to strengthen agricultural and rural communities against the growing number of cyberattacks on this critical national infrastructure:
“The measures from Sens. Catherine Cortez Masto (D-NV) and Mike Rounds (R-SD) come as the Biden administration has begun to examine the digital defenses of the agriculture sector and others as part of a broader effort to secure a variety of critical infrastructure organizations across the country. “Three sectors that are of key concern we are now turning to, which are education, health care and agriculture,’ Anne Neuberger, the deputy national security adviser for cyber and emerging tech, said last month at the Financial Times’ Cyber Resilience Summit. Recorded Future, the parent company of The Record, was a sponsor for the event.
The Food and Agriculture Industry Cybersecurity Support Act
The Food and Agriculture Industry Cybersecurity Support Act would establish a hub inside the National Telecommunications and Information Administration to assist agricultural producers to secure their technology and harden their operations against hackers. It also would create a hotline that offers advice and best practices on cyber issues.” (1)
“What are the details of The Food and Agriculture Industry Cybersecurity Support Act?”
(Generated by OpenAI’s ChatGPT)
As of my last update in September 2021, The Food and Agriculture Industry Cybersecurity Support Act (S. 1665) is a bill introduced in the United States Senate aimed at enhancing cybersecurity measures in the food and agriculture sector. The primary objective of this legislation is to protect critical infrastructure in the food supply chain from cyber threats and attacks.
Below are some of the key details of The Food and Agriculture Industry Cybersecurity Support Act:
1. Purpose: The bill seeks to establish a grant program to provide financial support to the food and agriculture sector for the implementation of cybersecurity best practices and improvements in their cybersecurity infrastructure.
2. Grant Program: The legislation proposes creating a grant program within the U.S. Department of Agriculture (USDA). This program would be responsible for distributing grants to eligible entities in the food and agriculture sector to enhance their cybersecurity capabilities.
3. Eligible Recipients: The bill identifies eligible recipients as entities operating within the food and agriculture sector, including agricultural producers, food processors, food manufacturers, and organizations involved in the transportation and distribution of food products.
4. Cybersecurity Best Practices: To qualify for the grants, the eligible recipients must demonstrate their commitment to implementing recognized cybersecurity best practices to protect their critical infrastructure and data from cyber threats.
5. Technical Assistance: The legislation emphasizes the importance of providing technical assistance and resources to the food and agriculture sector to support their efforts in improving cybersecurity measures.
6. Collaboration: The bill encourages collaboration between the USDA and other federal agencies, as well as private-sector partners and stakeholders, to enhance information sharing and coordination on cybersecurity matters affecting the food supply chain.
7. Report to Congress: The legislation requires the USDA to submit a report to Congress on the progress and effectiveness of the grant program, detailing the impact of the grants on enhancing cybersecurity in the food and agriculture sector.
It’s important to note that legislative information can change, and bills may undergo revisions and amendments during the legislative process. For the most current status and details of The Food and Agriculture Industry Cybersecurity Support Act or any other legislation, I recommend checking the official U.S. Congress website or other reputable sources that provide up-to-date information on legislative activities.
The current version of the bill introduced into the Senate can be found here.
The Cybersecurity for Rural Water Systems Act
The second bill, dubbed the Cybersecurity for Rural Water Systems Act would expand an existing U.S. Agriculture Department program that assesses the digital security of small water and wastewater utilities to create protocols for better defenses and provide assistance.
Last week the U.S. Court of Appeals for the 8th Circuit granted a stay of an Environmental Protection Agency memo that directed states to scrutinize the cybersecurity of their water systems.
‘My bipartisan bills will provide rural water systems, farmers, and ranchers with necessary resources to fend off cyber criminals trying to hack into the technology that supports our food and water supply,’ Cortez Masto said in a statement.
“What are the details of The Cybersecurity for Rural Water Systems Act?”
(Generated by OpenAI’s ChatGPT)
As of my last update in September 2021, The Cybersecurity for Rural Water Systems Act (H.R. 3591) is a bill introduced in the United States House of Representatives aimed at enhancing cybersecurity measures for rural water systems. The primary objective of this legislation is to improve the cybersecurity posture of small and medium-sized water systems in rural areas, helping to protect them from cyber threats and potential attacks.
Below are some of the key details of The Cybersecurity for Rural Water Systems Act:
1. Purpose: The bill seeks to create a grant program to provide financial assistance to rural water systems for the purpose of improving their cybersecurity infrastructure and capabilities.
2. Grant Program: The legislation proposes establishing a grant program within the U.S. Environmental Protection Agency (EPA). This program would be responsible for distributing grants to eligible rural water systems to strengthen their cybersecurity defenses.
3. Eligible Recipients: The bill identifies eligible recipients as small and medium-sized public water systems serving rural communities. These systems often have limited resources and may be more vulnerable to cyber threats.
4. Cybersecurity Improvements: To qualify for the grants, eligible water systems must demonstrate their commitment to implementing cybersecurity improvements and best practices to protect their critical infrastructure and data from cyber threats.
5. Technical Assistance: The legislation emphasizes the importance of providing technical assistance and resources to rural water systems to support their efforts in enhancing cybersecurity measures.
6. Collaboration: The bill encourages collaboration between the EPA and other federal agencies, as well as private-sector partners and cybersecurity experts, to ensure that rural water systems receive appropriate guidance and support in addressing their cybersecurity challenges.
7. Report to Congress: The legislation requires the EPA to submit a report to Congress on the progress and effectiveness of the grant program, detailing the impact of the grants on enhancing cybersecurity in rural water systems.
It’s important to note that legislative information can change, and bills may undergo revisions and amendments during the legislative process. For the most current status and details of The Cybersecurity for Rural Water Systems Act or any other legislation, I recommend checking the official U.S. Congress website or other reputable sources that provide up-to-date information on legislative activities.
The current version of the bill introduced into the Senate can be found here.
As of my last update in September 2021, the JBS Foods ransomware attack occurred in May 2021 and was one of the most significant cyber attacks on a food processing company. JBS Foods is one of the world’s largest meat processing companies, with operations in several countries, including the United States.
Story Behind the JBS Foods Ransomware Attack:
1. The Attack: In May 2021, JBS Foods fell victim to a ransomware attack carried out by a Russian-based cybercriminal group known as REvil (also known as Sodinokibi). The attackers exploited vulnerabilities in the company’s computer systems, gaining unauthorized access to its network.
2. Ransom Demand: After gaining control of JBS Foods’ systems, the hackers encrypted critical data and demanded a ransom payment to provide the decryption key and restore access to the company’s files and systems.
3. Impact: The attack had a severe impact on JBS Foods’ operations, causing disruptions to its meat processing facilities in several countries. This led to concerns about potential supply chain disruptions and food shortages.
Resolution:
1. Swift Response: JBS Foods responded quickly to the cyber attack by activating its incident response protocols. The company’s IT and cybersecurity teams worked diligently to contain the breach and mitigate its impact on its operations and customers.
2. Negotiations: Following the attack, JBS Foods entered into negotiations with the hackers to assess the ransom demands and explore possible avenues for resolving the situation.
3. Ransom Payment: Eventually, JBS Foods made the decision to pay a ransom to the attackers. The payment was made in Bitcoin, which is a common practice in ransomware attacks, as it offers a level of anonymity to the recipients.
4. Restoring Operations: With the receipt of the ransom payment, the cybercriminals provided the decryption key to JBS Foods, allowing the company to restore access to its encrypted data and systems.
5. Enhanced Security Measures: After resolving the immediate impact of the attack, JBS Foods likely took measures to strengthen its cybersecurity defenses to prevent similar incidents in the future. This may include conducting security audits, updating systems and software, and improving employee training on cybersecurity best practices.
It’s important to note that paying a ransom to cybercriminals is a controversial approach and is not endorsed by law enforcement agencies or cybersecurity experts. Ransom payments can incentivize further attacks and may not guarantee that the attackers will provide a reliable decryption key. Many experts advocate for organizations to invest in robust cybersecurity measures, data backups, and incident response plans to proactively defend against and recover from cyber attacks.
What Next?
Both Senate measures have already been introduced in the House. (1)
“What countries have the best-in-class cyber defense measures in the agricultural sector?”
(Generated by OpenAI’s ChatGPT)
As of my last update in September 2021, several countries have been proactive in implementing robust cyber defense measures in the agricultural sector to protect critical infrastructure and secure sensitive data. While the cybersecurity landscape is continually evolving, some countries have demonstrated strong capabilities in this area. Some of the countries known for having best-in-class cyber defense measures in the agricultural sector include:
1. United States: The United States has been at the forefront of developing cybersecurity strategies and frameworks to protect critical infrastructure, including the agriculture sector. The U.S. government has established initiatives such as the National Institute of Standards and Technology (NIST) Cybersecurity Framework and the Department of Homeland Security’s (DHS) Cybersecurity and Infrastructure Security Agency (CISA) to address cyber threats and promote information sharing between public and private sectors.
2. Israel: Israel is renowned for its advanced cybersecurity capabilities and is often considered a leader in the field. The country’s expertise in cybersecurity extends to various industries, including agriculture. It has a strong focus on research and development, as well as a thriving cybersecurity startup ecosystem.
3. United Kingdom: The UK has been actively developing its cybersecurity measures, including in critical infrastructure sectors such as agriculture. The National Cyber Security Centre (NCSC) in the UK provides guidance and support to businesses and organizations, helping them strengthen their cybersecurity posture.
4. Australia: Australia has also been making significant strides in enhancing cybersecurity across different sectors, including agriculture. The Australian Cyber Security Centre (ACSC) provides resources and guidance to businesses and government agencies to improve their cybersecurity resilience.
5. Canada: Canada has been working on strengthening its cybersecurity defenses, and the Canadian Centre for Cyber Security (CCCS) provides expertise and support in this area. The country’s focus on securing critical infrastructure extends to agriculture as well.
6. Germany: Germany is known for its robust cybersecurity capabilities and has been taking measures to protect its critical infrastructure from cyber threats. The country has been actively working on implementing cybersecurity strategies to safeguard various sectors, including agriculture.
It’s important to note that the cybersecurity landscape is constantly changing, and the effectiveness of cyber defense measures can vary depending on factors such as technological advancements, government policies, and the level of investment in cybersecurity. Additionally, the list above is not exhaustive, and other countries may also have strong cybersecurity measures in the agricultural sector.
For the most up-to-date information on countries with best-in-class cyber defense measures in the agricultural sector, I recommend consulting cybersecurity reports, government publications, and industry assessments that focus on global cybersecurity capabilities.
Further Context
“What are some of the major types of cyber attacks in the United States in the Agriculture Sector?”
(Generated by OpenAI’s ChatGPT)
As of my last update in September 2021, specific details on major cyber attacks in the agriculture sector in the United States were limited. However, it’s important to note that the agriculture sector, like other critical infrastructure sectors, is not immune to cyber threats and attacks. Cybercriminals may target the agriculture industry for various reasons, including disrupting the food supply chain, stealing intellectual property, or gaining access to sensitive data.
While I cannot provide real-time information beyond my last update, here are some general examples of cyber attacks that have impacted critical infrastructure sectors, including agriculture, in the past:
1. Ransomware Attacks: Ransomware attacks involve malicious actors encrypting an organization’s data and demanding a ransom for its release. In some cases, cybercriminals may target agricultural businesses, including large farming operations or food processing companies, to disrupt their operations and demand ransom payments.
2. Data Breaches: Data breaches involve unauthorized access to an organization’s sensitive information, such as customer data, financial records, or intellectual property. In the agriculture sector, data breaches could expose valuable research and development data or disrupt supply chain information.
3. Phishing Attacks: Phishing is a common cyber attack that uses deceptive emails or messages to trick individuals into revealing sensitive information or clicking on malicious links. Phishing attacks may target employees in the agriculture industry, seeking to gain unauthorized access to critical systems.
4. Supply Chain Attacks: Cybercriminals may compromise suppliers or service providers in the agriculture sector to gain access to the systems of larger organizations within the supply chain. These attacks can have cascading effects on the entire industry.
5. Infrastructure Disruption: Critical infrastructure systems, such as irrigation control systems or automated machinery in the agriculture sector, could be targeted for disruption, leading to physical damage or financial losses.
Please note that the examples provided above are general and not specific to any particular incident in the agriculture sector. To get updated and accurate information on major cyber attacks in the United States’ agriculture sector, I recommend checking news sources, government reports, and cybersecurity incident databases that provide real-time data and analysis on cyber threats and attacks.
“What are some of the companies that have experienced cyber attacks in the agriculture sector in the United States?”
(Generated by OpenAI’s ChatGPT)
As of my last update in September 2021, specific details on individual companies that have experienced cyber attacks in the agriculture sector in the United States were not readily available in my database. The nature of cyber attacks often involves confidentiality concerns, and not all incidents are publicly disclosed or reported.
However, it’s important to recognize that cyber attacks can target a wide range of companies and organizations within the agriculture sector in the United States, including:
1. Large Agribusiness Corporations: Major agribusiness companies involved in agricultural production, processing, and distribution may be attractive targets for cybercriminals due to their scale and critical role in the food supply chain.
2. Seed and Biotechnology Companies: Companies engaged in agricultural research, seed development, and biotechnology may possess valuable intellectual property and sensitive data that could be targeted.
3. Food Processing and Manufacturing Companies: Organizations involved in food processing and manufacturing are essential components of the agriculture sector and could be vulnerable to cyber attacks.
4. Farming Cooperatives: Agricultural cooperatives that represent groups of farmers and manage shared resources may also be at risk due to their interconnected systems.
5. Precision Agriculture and IoT Technology Providers: Companies offering precision agriculture solutions, smart farming technology, and Internet of Things (IoT) devices may be targeted to exploit vulnerabilities in their products.
6. Agricultural Supply Chain Partners: Cybercriminals may also target companies and organizations that are part of the agriculture supply chain, including logistics, transportation, and storage providers.
It’s important to note that the information provided here is general and not exhaustive, and specific incidents may have occurred beyond my last update. To get updated information on companies that have experienced cyber attacks in the agriculture sector in the United States, I recommend consulting recent news sources, cybersecurity incident reports, and government advisories that provide current and accurate data on cyber threats and attacks in the agriculture industry.
“What are some of the companies that have experienced cyber attacks in the agriculture sector internationally?”
(Generated by OpenAI’s ChatGPT)
As of my last update in September 2021, there have been some reported instances of cyber attacks targeting companies in the agriculture sector internationally. Please note that the cybersecurity landscape is constantly evolving, and new incidents may have occurred beyond that point. Here are a few examples of notable cyber attacks on companies in the agriculture sector from around the world:
1. Monsanto (Now Bayer Crop Science): Monsanto, a major agricultural biotechnology corporation, experienced a data breach in 2011. Hackers gained unauthorized access to the company’s systems and stole sensitive information, including intellectual property related to genetically modified seeds and agricultural technologies.
2. Wilmar International: In 2020, Wilmar International, one of the world’s largest agribusiness companies based in Singapore, disclosed a data breach. The company reported that an unauthorized person had gained access to its IT systems, although specific details on the extent of the breach were not fully disclosed.
3. Agromart Group (Canada): In 2019, the Canadian agriculture retailer Agromart Group experienced a ransomware attack. The incident led to the encryption of data, and the hackers demanded a ransom for its release. This attack disrupted the company’s operations and highlighted the growing risk of ransomware targeting the agriculture sector.
4. NongHyup (South Korea): In 2011, NongHyup, a South Korean agricultural cooperative, experienced a significant cyber attack. Hackers from North Korea were suspected of being behind the attack, which disrupted the bank’s operations and compromised customer data.
5. Ukraine Grain Companies: In 2016, several Ukrainian grain companies were affected by a cyber attack linked to the NotPetya malware outbreak. This attack disrupted operations, including shipments and logistics, and caused financial losses for the companies involved.
It’s important to recognize that cyber attacks on companies in the agriculture sector can have severe consequences, including financial losses, reputational damage, and impacts on food supply chains. However, many cyber attacks may go unreported or undisclosed due to confidentiality concerns or other reasons.
For more up-to-date and comprehensive information on international cyber attacks in the agriculture sector, I recommend consulting reputable news sources, cybersecurity incident databases, and reports from relevant government agencies and industry associations.
The Cyber Threat Vector as Food and Agriculture Industry Sector Heads into Critical Seasons
Agriculture and Cyber Risk are a New Driving Force and Critical Uncertainty
More Details Emerge: REvil Gang Arrestee Tied to 2021 Colonial Pipeline Attack; Ukrainian Data Wiping Attack a False Flag Operation
