US farmer cooperative hit by $5.9M BlackMatter ransomware attack

LASER_oneXM

Level 37
Verified
Feb 4, 2016
2,597
U.S. farmers cooperative NEW Cooperative has suffered a BlackMatter ransomware attack demanding $5.9 million not to leak stolen data and provide a decryptor.
NEW Cooperative is a farmer's feed and grain cooperative with over sixty locations throughout Iowa.

In a weekend ransomware attack, the threat actors demand a 5.9 million dollar ransom, which will increase to $11.8 million if a ransom is not paid in five days.
These ransom demands are a starting point for negotiations and usually lead to significantly smaller payments if a victim decides to pay.

NEW Cooperative has confirmed the attack to BleepingComputer and stated that they had taken their systems offline to contain the attack's spread.
 

Correlate

Level 16
Verified
May 4, 2019
737

Iowa farm services provider hit with BlackMatter ransomware and $5.9 million ransom​

New Cooperative -- an Iowa-based farm service provider -- has been hit with a ransomware attack, continuing a streak of incidents affecting agricultural companies this year.

The company did not respond to requests for comment but confirmed to Bloomberg News that it was suffering from a "cybersecurity incident" that impacted some of its devices and systems. They told Bloomberg reporters that they took systems offline to "contain the threat."
 

LASER_oneXM

Level 37
Verified
Feb 4, 2016
2,597
Minnesota farming supply cooperative Crystal Valley has suffered a ransomware attack, making it the second farming cooperative attacked this weekend.
Crystal Valley is a farm supply and grain marketing cooperative serving farmers in Minnesota and northern Iowa.

Yesterday, Crystal Valley disclosed that their company was targeted with a ransomware attack on Sunday that led them to shut down IT systems, preventing payments using Visa, Mastercard, and Discover credit cards.

"On Sunday, September 19, Crystal Valley was alerted we had been targeted in a ransomware attack. This attack has infected the computer systems at Crystal Valley and severely interrupted the daily operations of the company," disclosed Crystal Valley in a notice on their website.

 
  • Like
Reactions: Gandalf_The_Grey
Top