Food and Ag-ISAC finds 72 active threat actors behind persistent, sophisticated cyber attacks targeting food supply chains

The Food and Ag-ISAC paints a stark picture of a sector facing sustained and increasingly sophisticated cyber pressure, with 72 active threat actors identified from a pool of more than 330 monitored adversaries.

The analysis, powered by the Predictive Adversary Scoring System (PASS), highlights both nation-state groups and financially motivated cybercriminals are consistently targeting the farm-to-table supply chain, using a mix of persistence, technical sophistication, and clear strategic intent to exploit sector vulnerabilities.

In its 2025 Food and Agriculture Cyber Threat Report, the findings point to a threat landscape shaped heavily by geopolitical and economic interests, with Russia accounting for nearly 59.3% of observed adversary activity, followed by China at 25.4%, underscoring the dual role of ransomware ecosystems and state-backed operations in targeting the sector. Common attack techniques range from living-off-the-land tactics and modified malware to supply chain compromises and data extortion, reinforcing that attackers are persistent and highly adaptive, forcing organizations to rethink how they prioritize defenses and allocate limited cybersecurity resources.

Read more at Industrial Cyber