Minnesota Grain Handler Targeted in Ransomware Attack

By Tom Polansek and Karl Plume

Minnesota agricultural firm Crystal Valley Cooperative said it had been targeted in a ransomware attack in recent days, making it the second Midwestern farm-services provider in a week to be forced to take systems offline due to cybersecurity incidents.

Crystal Valley, which sells supplies like fertilizer to farmers and buys their crops, said it became aware of the attack on Sunday, prompting it to take operating systems offline and to stop accepting major credit cards.

"This attack has infected the computer systems at Crystal Valley and severely interrupted the daily operations of the company," Crystal Valley said in a statement on its website. It asked customers for understanding while the company resolves the issue.

The attack left Crystal Valley unable to mix fertilizer or fulfil orders for livestock feed, said Kevin Paap, a corn and soybean farmer in Garden City, Minnesota, on Thursday.

"With the help of some other local co-ops, they're helping grind some feed and sharing the burden," he said.

NEW Cooperative Inc in Iowa said on Monday its systems were offline to contain a cybersecurity incident. A Russian-speaking cybercriminal group named BlackMatter said on its website that it stole data from the farm services provider.

The disruptions are hitting the Farm Belt as growers gear up for the autumn harvest.