Agrolab’s Cyberattack Caused a Nine-Day Shutdown and €250,000 in Costs
Summary
Agrolab’s reported that a July 2025 cyberattack blocked its information systems and disrupted operations for nine days. The lab paid no ransom, restored operations from spared tape backups and reported €250,000 in costs.
Key points
- Agrolab’s director said the attack was discovered on July 20, 2025; the company’s information system and physical and virtual servers were affected.
- The lab contacted France’s DGSI and received support from Groupama and IT provider Inforsud.
- Agrolab’s decided not to pay a ransom and operated in a highly degraded mode during the outage.
- The company was stopped for nine days and restarted using tape backups that had not been affected.
- The article reports that no pirated data had appeared on the dark web at the time of reporting.
- The attack cost Agrolab’s €250,000 in personnel expenses, equipment purchases and lost revenue.
- Eleven months later, the return to normal was still incomplete; the company said it was investing in stronger security measures.
Article Details
- Victim Organization
- Agrolab’s
- Victim Domain
- Unknown
- Incident Type
- Ransomware cyberattack
- Incident Date
- 2025-07-20
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The attack blocked the entire information system and corrupted physical and virtual servers. Agrolab’s operated in a highly degraded, paper-based mode; the company was stopped for nine days, and recovery was still incomplete eleven months later. Reported financial costs were €250,000, including personnel costs, equipment purchases, and lost revenue. The article says compromised data had not appeared on the dark web at the time of reporting.
- Ransom Or Extortion
- No ransom was paid; management decided not to pay. The article does not identify an attacker or report a specific ransom demand.
- Claim Status
- confirmed
People
Vendors
Groupamales rangs autour de son chef et passe en mode résistance. Les services de la DGSI(2) sont contactés, Groupama et le fournisseur informatique Inforsud apportent leur précieux appui. À 14 heures, il est actéInforsuden mode résistance. Les services de la DGSI(2) sont contactés, Groupama et le fournisseur informatique Inforsud apportent leur précieux appui. À 14 heures, il est acté qu’aucune rançon ne sera versée. Débute alors un