[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fs7CyS8DktzTWq0JTWW71gfqYdYmotFFPmnx6HpOwNCo":3},{"article":4,"iocs":44,"watch_terms":45,"solutions":46,"lesson":138},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"7abbecf5-5312-423f-a741-37bee788de8a","Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer","ransomware-attack-shuts-down-mills-of-australia-s-second-largest-sugar-producer-045b34","Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen. The post Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer appeared first on SecurityWeek.","Mackay Sugar, Australia's second-largest sugar producer, has been hit by a ransomware attack attributed to the threat group known as The Gentlemen. The incident forced the company to shut down some of its mills, impacting operations and supply chains. While limited manual operations have resumed at one mill, key systems remain under restoration, and the company is advising growers not to harvest until further notice. The Gentlemen group, tracked by Microsoft as Storm-2697, has claimed responsibility but has not yet leaked any data.","Ransomware attack by The Gentlemen group disrupts operations at Australia's second-largest sugar producer.","https:\u002F\u002Fwww.securityweek.com\u002Fransomware-attack-shuts-down-mills-of-australias-second-largest-sugar-producer\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F06\u002Fsugar-mill.jpeg","2026-06-15T15:15:55+00:00","2026-06-15T16:00:13.210761+00:00",7,[17,20,23],{"name":18,"type":19},"The Gentlemen","threat_actor",{"name":21,"type":22},"Microsoft","vendor",{"name":24,"type":25},"Storm-2697","product","7d8b5ab8-ea0b-4ced-ae97-ec251b86993a",{"id":26,"icon":28,"name":29,"slug":30},null,"Ransomware","ransomware",[32,37,39],{"category":33},{"id":34,"icon":28,"name":35,"slug":36},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":38},{"id":26,"icon":28,"name":29,"slug":30},{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,24],{"controls":47,"vendors":134},[48,76,105],{"slug":49,"name":50,"problem":51,"products":52},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[53,61,68],{"vendor_slug":54,"vendor_name":55,"vendor_logo":56,"product_slug":57,"product_name":58,"url":59,"description":60},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png","managed-edr","Huntress Managed EDR","https:\u002F\u002Fwww.huntress.com\u002Fplatform\u002Fmanaged-edr","Endpoint detection and response monitored around the clock by Huntress analysts.",{"vendor_slug":62,"vendor_name":21,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"sophos","Sophos","\u002Fvendor-logos\u002Fsophos.png","sophos-endpoint","Sophos Endpoint","https:\u002F\u002Fwww.sophos.com\u002Fen-us\u002Fproducts\u002Fendpoint-security","Endpoint protection with Intercept X anti-ransomware technology and EDR.",{"slug":77,"name":78,"problem":79,"products":80},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":106,"name":107,"problem":108,"products":109},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",[135],{"slug":62,"name":21,"logo_path":63,"roles":136},[137],"reported_by",{"slug":139,"title":140,"body":141,"framework_refs":142,"framework_notes":150},"ransomware-attack-cripples-sugar-production-operations","Ransomware Attack Cripples Sugar Production Operations","Mackay Sugar's ransomware attack by The Gentlemen group demonstrates how cyber incidents can severely impact critical industrial operations and supply chains. The company's inability to quickly restore systems forced mill shutdowns and disrupted the entire sugar production cycle, affecting not just the company but also dependent growers and customers. This incident highlights the critical importance of having robust backup systems and tested incident response procedures for industrial control systems. Without proper recovery capabilities, even temporary shutdowns can cascade into significant economic losses and supply chain disruptions.",[143,144,145,146,147,148,149],"CIS Control 11","CIS Control 12","NIST IR-1","NIST CP-1","NIST CP-2","ISO 27031","IEC 62443-2-1",{}]