{"id":"mackay-sugar-mills-cyberattack-jun-2026","category":"breach","status":"closed","title":"Mackay Sugar cyberattack halts two Queensland mills; all three operational by 26 June","tldr":"A cyberattack halted normal operations at Mackay Sugar’s Farleigh and Racecourse mills, disrupting growers. All three mills were operational by 26 June, but the data investigation remained open. No household software update is required.","summary":"Mackay Sugar disclosed a cyberattack on 10 June that halted normal operations at its Farleigh and Racecourse mills in Queensland. ABC reported that many of the approximately 1,300 farms supplying the company paused harvesting. Farleigh initially processed previously harvested cane manually while supply and logistics systems were restored. The Gentlemen ransomware group claimed responsibility, according to SecurityWeek and ABC, but ABC said attribution could not be independently verified. Mackay Sugar confirmed unauthorised access to parts of its IT environment and investigated the claim. Harvesting and cane rail operations restarted on 18 June, followed by crushing at Farleigh. By 26 June, all three mills were operational, including Racecourse and Marian. The company was still investigating the impact on its data. No newer public outcome was found through 3 November, leaving the extent of any information theft and final attribution unconfirmed.","action":"Nothing for you to do on a household device: this affected Mackay Sugar’s business systems. Employees, growers and contractors should follow the company’s direct updates and contact it about any personal-information concerns.","product":"Mackay Sugar’s business systems and Queensland mill operations","audience":"work","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["mackay-sugar","australia","cyberattack","ransomware","manufacturing"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Mackay Sugar Cyber Security Incident","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident","by":"Mackay Sugar","date":"2026-06-10"},{"kind":"advisory","title":"Mackay Sugar Cyber Security Incident Update 2","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l","by":"Mackay Sugar","date":"2026-06-12"},{"kind":"advisory","title":"Mackay Sugar Cyber Security Incident Update 4","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l-g5bpl-kfy3a","by":"Mackay Sugar","date":"2026-06-17"},{"kind":"advisory","title":"Mackay Sugar Cyber Security Incident Update 5","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l-g5bpl-kfy3a-khz65","by":"Mackay Sugar","date":"2026-06-19"},{"kind":"advisory","title":"Mackay Sugar Cyber Security Incident Update 6","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l-g5bpl-kfy3a-khz65-4sblm","by":"Mackay Sugar","date":"2026-06-26"},{"kind":"news","title":"Global ransomware group reportedly claim cyber attack that shut down Mackay Sugar mills","url":"https://www.abc.net.au/news/2026-06-18/the-gentlemen-ransomware-russian-speaking-hack-north-qld-sugar/106807366","by":"ABC News","date":"2026-06-18"},{"kind":"news","title":"Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer","url":"https://www.securityweek.com/ransomware-attack-shuts-down-mills-of-australias-second-largest-sugar-producer/","by":"SecurityWeek","date":"2026-06-15"}],"started":"2026-06-10","closed":"2026-06-26","created":"2026-11-03T21:41:14.310Z","updated":"2026-11-03T21:41:14.310Z","cve_notes":[],"timeline":[{"at":"2026-06-26","added":"2026-11-03T21:35:43.306Z","kind":"other","text":"Mackay Sugar confirmed that Racecourse had restarted and all three mills were operational. Specialists were still investigating the incident and its impact on company data.","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l-g5bpl-kfy3a-khz65-4sblm","by":"Mackay Sugar","patch":null},{"at":"2026-06-19","added":"2026-11-03T21:35:43.306Z","kind":"other","text":"Mackay Sugar said harvesting and cane rail operations had restarted the previous day, with crushing resuming at Farleigh overnight. Racecourse was still awaiting restoration and validation of key systems.","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l-g5bpl-kfy3a-khz65","by":"Mackay Sugar","patch":null},{"at":"2026-06-17","added":"2026-11-03T21:35:43.306Z","kind":"other","text":"Mackay Sugar confirmed evidence of unauthorised access to parts of its IT environment. It was investigating an external party’s claim and whether information had been accessed.","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l-g5bpl-kfy3a","by":"Mackay Sugar","patch":null},{"at":"2026-06-15","added":"2026-11-03T21:35:43.306Z","kind":"other","text":"SecurityWeek reported that The Gentlemen ransomware group had claimed Mackay Sugar as a victim that day, without publishing data. The report said it was unclear whether industrial control systems had been compromised.","url":"https://www.securityweek.com/ransomware-attack-shuts-down-mills-of-australias-second-largest-sugar-producer/","by":"SecurityWeek","patch":null},{"at":"2026-06-12","added":"2026-11-03T21:35:43.306Z","kind":"other","text":"Farleigh Mill resumed limited manual crushing to process cane harvested before the incident. Cane supply and logistics systems were still being restored, and the mills were accepting no additional cane.","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident-akm6l","by":"Mackay Sugar","patch":null},{"at":"2026-06-10","added":"2026-11-03T21:35:43.306Z","kind":"disclosed","text":"Mackay Sugar disclosed a cyber incident affecting its operations. It engaged cyber security specialists, introduced interim business processes and began communicating with employees, growers and partners.","url":"https://www.mkysugar.com.au/news-updates-circulars/mackay-sugar-cyber-security-incident","by":"Mackay Sugar","patch":"na"}],"url":"https://hard.fyi/live/mackay-sugar-mills-cyberattack-jun-2026/","json":"https://hard.fyi/api/live?id=mackay-sugar-mills-cyberattack-jun-2026"}