Ransomware Incident Disrupts Mackay Sugar Mills as Recovery Continues
Summary
A ransomware incident disrupted operations at Mackay Sugar, affecting two mills. The company reported systems restoration and planned a staged restart; The Gentlemen listed the company, but no data leak was reported and OT impact remains unclear.
Key points
- Mackay Sugar disclosed a cybersecurity incident on June 10 that disrupted some operations.
- The incident appears to have affected two of the company’s three Queensland mills.
- The company resumed limited manual crushing at one mill and reported progress restoring systems for cane supply, harvesting and mill operations.
- The Gentlemen ransomware group listed Mackay Sugar on its site on June 15; no data had been leaked at the time of the report.
- The company provided no information on potential data compromise, and it remains unclear whether industrial control or other operational technology systems were affected.
Article Details
- Victim Organization
- Mackay Sugar
- Incident Type
- Ransomware attack
- Operational Impact
- Operations at two mills were reportedly affected. Mackay Sugar temporarily shut down some mill operations; it later resumed limited manual crushing at one mill. Cane supply, harvesting, and mill-operation systems remained under restoration, and no additional cane was being accepted at the mills at the time of the update.
- Ransom Or Extortion
- The Gentlemen ransomware group listed Mackay Sugar on its Tor-based website on June 15. The article reports no data leak and no ransom demand; the company did not provide information on possible data compromise.
- Claim Status
- claimed
MITRE ATT&CK
Threat Actors
Storm-2697Microsoft tracks The Gentlemen as Storm-2697, according to the article. The group listed Mackay Sugar as a victim, but its responsibility for this incident is unverified.The GentlemenThe ransomware group listed Mackay Sugar on its Tor-based website on June 15. The listing is an unverified claim of involvement; the article reports no data leak.