Ransomware incidents across food and agriculture doubled in 2025 to 265 recorded cases, a 29% increase over 2024, and researchers estimate the true count is higher because many attacks go unreported. The figure lands as hackers forced freezer and fridge temperatures up to 122 degrees Fahrenheit at several hundred French supermarkets this week, causing food spoilage and fires. According to Reuters, the cold aisles, which can typically be controlled over the internet, ran outdated firmware, creating the vulnerabilities.

The French breach is the latest in a rising number of documented attacks that have hit breweries, farms, grocery distributors, food processors and cold-chain operators. The Food and Agriculture Information Sharing and Analysis Center (Food and Ag-ISAC, an industry threat-intelligence body) has warned that AI-enabled ransomware and nation-state threats are intensifying cyber risks across the sector.

What have the major incidents cost?

The pattern of losses runs from farm-level to multinational scale:

• United Natural Foods (UNFI), USA, June 2025 — social engineering plus ransomware disabled all 53 distribution centers, affected more than 30,000 retailers including Whole Foods, and cost an estimated $350–400 million in lost sales.
• Asahi Group Holdings, Japan, September 2025 — ransomware disrupted 30 factories for months; the company refused to pay and lost roughly $31 million (JPY 5 billion) in revenue, with 1.9 million records potentially exposed.
• JBS Foods, USA/Australia, May 2021 — a five-day halt across 47 Australian and 9 US sites ended with an $11 million ransom payment and federal sector security warnings.
• Dole Foods, USA, February 2023 — a North American shutdown and temporary plant closures produced roughly $10.5 million in first-quarter losses.
• Duvel Moortgat, Belgium/USA, March 2024 — production halted at Belgian and US sites; 88 GB of data claimed stolen.
• Federated Co-operatives Ltd., Canada, June 2024 — grocery inventory shortages across Western Canada, with bread, frozen goods and produce affected and systems offline more than two weeks.
• Nichirei Logistics, Japan, July 2026 — 140 refrigerated distribution centers disrupted, affecting KFC Japan's 1,300-plus restaurants, Aeon and Kura Sushi.
• Swiss farmer Vital Bircher, November 2023 — herd monitoring systems went offline; one calf died and a cow was euthanized, the first confirmed livestock death from a cyberattack.

UNFI's $350–400 million in lost sales approaches what a mid-sized processor earns in a quarter — a single breach can erase a year of revenue for an operator, trigger regulatory scrutiny and damage customer relationships overnight.

What distinguishes agrifood cyber risk?

The fallout is physical. Other critical infrastructure sectors face severe physical risks, but a compromised food supply threatens access to safe, reliable food. Attackers have shut off HVAC systems at swine farms so pigs catch pneumonia, disabled ordering systems at distribution centers and cut off ingredient supply to restaurant chains. Advances in farming and food production technology have created an attack surface that arguably did not exist a decade ago. In the US, the FBI and CISA (the Cybersecurity and Infrastructure Security Agency) have both flagged precision agriculture as an emerging vulnerability, but the federal advisory on the subject has not been updated since 2018.

For governments, the gap is disclosure. The food system is designated critical infrastructure, yet mandatory attack-reporting requirements remain weak, meaning the true scale of the problem is almost certainly larger than the data suggests.

What does the proposed consortium change?

Last week, researchers published recommendations in Nature Food for building what they call a nationwide consortium approach to ag cybersecurity. The Iowa State-led collaboration drew on workshops with more than 150 participants across farms, cooperatives, agribusinesses, NGOs, academia, government and cybersecurity firms.

The proposed Agriculture Cybersecurity Consortium (ACC) would gather those groups to solve sector-wide security challenges and provide education, helping the food system move from what the researchers describe as "reactive crisis management toward anticipatory, national-level resilience."

"Every day, millions of small- and medium-sized agrifood operations across the supply chain face very real cyber risks, though many may not realize how vulnerable they are," Richard Hull, a principal scientist at IC-FOODS and computer science lecturer at UC Davis, said in a statement. "With the advent of agentic AI, cyber attacks are growing in number and sophistication."

Hull said he hopes the paper will "accelerate a shift toward making cyberhealth a fundamental part of agrifood operations, alongside crop health, animal health and food safety."

"As a nation, we are rapidly transitioning from the traditional 'farm-to-fork' supply chain to a digitally interconnected ecosystem that can be described as 'farm-to-fiber,'" said Virginia Tech professor Feras Batarseh, who is also director of AI assurance and applications at A3 Lab. "This evolution reflects the growing reliance on AI, automation, data, and interconnected technologies across food production, processing, and distribution — a notion that places cybersecurity of critical agricultural infrastructure at the center of food security."

How should operators respond?

Agtech analyst and consultant Rhishi Pethe calls for building "a culture of talking about cybersecurity" in agrifood, noting that banking and healthcare have maintained that dialogue for decades and that proven tactics can be borrowed rather than invented.

"It's always a cat-and-mouse game between bad actors and defenders," Pethe said. "But if the defenders are not prepared, you could have some really bad outcomes in the near future."

For investors, the implication is due diligence: the agrifood companies building the next physical AI offering, logistics platform or smart harvester are also building new opportunities for attackers, and analyzing the security of those offerings needs to become part of the evaluation process. For the growers and cooperatives adopting connected equipment, the French supermarket attack shows that unpatched firmware in remotely controlled systems is a direct route to product loss. With attack counts climbing and federal guidance seven years old, sector-wide coordination of the kind proposed in Nature Food is the concrete step now on the table.