Canadian farms are increasingly connected, but this brings risks. Cyber criminals are targeting agriculture with ransomware, phishing scams, and AI-driven fraud, exploiting weak security and outdated systems. The MNP Digital Cyber Security on the Farm 2025 Report found that 82 percent of farmers believe they’ve never been attacked, while nearly 50 percent of their suppliers report they have.
Canadian agriculture is revolutionizing through digital advancements. Precision farming, automation, and data-driven decision-making are increasing efficiency and profitability for producers. However, these advancements come with growing cyber risks. Farms today are not just fields and barns — they are interconnected networks of smart devices, sensors, and cloud-based management systems. Unfortunately, increased connectivity has made farms a prime target for cyber criminals. This issue has become so significant that it has even been highlighted by the FBI south of the border.
Despite the rising threat, cyber security awareness in the agricultural sector remains low. According to the MNP Digital Cyber Security on the Farm 2025 Report, developed in conjunction with RealAgristudies, four out of five Canadian producers believe they have never experienced a cyberattack — a stark contrast to reports from nearly half their supplier, who indicate otherwise. This disconnect underscores the urgent need for greater cyber security education and preparedness across the industry.
More key learnings from the report include:
- Low cyber awareness is leaving farms exposed
- 80 percent of farms have no incident response plan
- Generational divide creates a false sense of security
- Unprotected automated systems increase vulnerability
- Education and partnerships are critical for stronger defenses
A new reality: The growing threat of cyber attacks on agriculture
Agriculture is crucial to Canada’s economy and food security, and any disruption to farm operations — from supply chain interruptions to compromised data — can have significant ripple effects on consumers, retailers, and global markets. This is precisely why cyber criminals have turned their attention to the industry. The threat landscape is evolving, with attackers using increasingly sophisticated techniques. Ransomware, phishing, and AI-driven scams are among the most prevalent threats facing farmers today. Criminals are leveraging artificial intelligence to create deepfake videos, voice phishing (vishing), and fraudulent supplier communications that trick farm operations into divulging sensitive information or making unauthorized payments. In fact, MNP’s Digital team found 68 percent of cyber incidents involve human error, whether it’s an employee clicking a fraudulent link or using weak passwords. Even more concerning, 62 percent of cyber attacks involve ransomware or extortion, meaning criminals lock farm data and demand payment for its release.
Operational technology (OT) on farms is another major vulnerability. Systems that control irrigation, automated feeding, and GPS-guided machinery are often not built with security in mind. A cyberattack targeting these technologies could halt planting, disrupt harvests, or even endanger livestock.
The disconnect: Farmers underestimating the risk
Canadian producers are facing a hidden danger they don’t even realize exists. With 82 percent believing they’ve never been targeted by a cyberattack, yet nearly half of their suppliers report they have. The reality? Many cyber threats operate in silence. Phishing emails, malware, and unauthorized access often go unnoticed — until it’s too late.
This false sense of security is further complicated by generational knowledge gaps. The MNP Digital Cyber Security on the Farm 2025 Report, found that only seven percent of farmers feel very knowledgeable about cyber security. Though younger farmers are more familiar with digital risks, and older generations often assume they’re safe because they use less technology, both groups tend to be overconfident in their preparedness for a cyberattack. This overconfidence leaves their farms vulnerable, making cyber security not just a necessity, but an urgent priority.
The cost of inaction: What’s at stake
The financial impact of cyberattacks can be devastating. Ransomware incidents, in particular, have crippled agribusinesses worldwide. In these attacks, hackers encrypt a farm’s data and demand payment in exchange for restoring access. For farms reliant on digital management systems, an attack can mean losing critical data on crop yields, livestock health, and financial records. Beyond financial losses, cyber security breaches can erode trust. Producers operate within tightly knit supply chains, and an attack on one operation can have cascading effects. These cyberattacks are not unique to agriculture but are part of a growing trend across all industries. According to Statistics Canada, one in six businesses was impacted by a cyber security incident in 2023, with the frequency increasing with the size of the business. This aligns with the data unearthed in MNP’s Cyber on the Farm 2025 Report, which shows that cyber threats increase with the size of a farm based on income levels.
The real-world impact
In one case, a small hog farm in Ontario fell victim to a ransomware attack orchestrated by activists. The attackers infiltrated the farm’s computer systems, encrypting vital data and threatening to release fabricated evidence of animal abuse unless a ransom was paid. This incident not only jeopardized the farm’s operations but also posed a significant reputational risk. Cyber security experts warn that such tactics are likely to become more common, emphasizing the need for heightened awareness and robust security measures within the agricultural community.
Another significant event involved JBS, one of the world’s largest meat processing companies. In 2021, JBS experienced a ransomware attack that disrupted its operations across multiple countries, including Canada. The company ultimately paid $11 million to the attackers to regain access to its systems and prevent further disruption. This attack highlighted the susceptibility of even large agribusinesses to cyber threats and underscored the potential for widespread impact on the food supply chain.
Incidents like this illustrate the evolving tactics of cyber criminals targeting the agricultural sector. From direct financial extortion to threats of reputational damage, the methods employed are becoming more sophisticated and damaging. As farming operations continue to integrate advanced technologies, it’s imperative for producers to implement comprehensive cyber security strategies to safeguard their businesses against these emerging threats.
How do these attacks happen?
Cyber criminals use a variety of tactics to infiltrate farm systems, including:
- Phishing Attacks: Deceptive communications trick producers into revealing passwords or installing malware. These attacks are most successful during busy seasons, when vigilance is low.
- Ransomware: Hackers encrypt critical farm data and demand payment for its release. Without proper backups, a single attack can wipe out years of financial records and operational data.
- Exploiting known vulnerabilities: 14 percent of cyberattacks gain access through outdated or unpatched software, allowing criminals to bypass security measures.
- QR code scams (Quishing): Fraudulent QR codes redirect users to malicious sites designed to steal login credentials.
- AI-driven fraud: Cyber criminals use artificial intelligence to create highly convincing scams, such as another form of phishing known as vishing (voice phishing), that mimic trusted communications —exploiting human trust, as there often difficult to detect, even for tech-savvy individuals.
Cyber criminals cast a wide net, targeting businesses that lack proper cyber defences. Small and mid-sized farms are particularly vulnerable, as they often assume they aren’t big enough to be a target — but the reality is quite the opposite. Here’s a look at how some of the most common methods have compared over the years, with most seeing a rise year after year, based on Statistics Canada:
Methods most commonly used for cyber security incidents, Canada, 2021 and 2023, % of businesses impacted by cyber security incidents |
||
|
|
2021 |
2023 |
|
Scams and fraud |
44% |
50% |
|
Identity theft |
20% |
31% |
|
Exploiting software, hardware, or network vulnerabilities |
19% |
25% |
|
Password cracking |
23% |
22% |
|
Malicious software (excluding ransomware) |
21% |
18% |
|
Ransomware |
11% |
13% |
Cyber security planning: Bridging the preparedness gap
Cyber security preparedness remains low among Canadian producers. The study revealed that nearly 80 percent of farms lack a formal cyber security plan. Without a structured approach to identifying threats and responding to attacks, many farms remain vulnerable to disruptions that could have been prevented.
Here are four key steps you can take to improve your cyber security:
1. Increased awareness and training
Cyber security is not just an IT issue — it’s a business necessity. Producers and their employees must understand how to recognize phishing attempts, secure sensitive information and report suspicious activity. Implementing basic cyber security training can significantly reduce the likelihood of falling victim to scams.
2. Develop an incident response plan
An incident response plan outlines the steps to take when a cyberattack occurs, minimizing damage and ensuring a quick recovery. This includes:
- Identifying who is responsible for cyber security within the farm operation.
- Creating a communication plan to notify key stakeholders in the event of a breach.
- Establishing backup and recovery procedures to restore critical data quickly.
3. Secure farm equipment and operational technology
Many cyberattacks exploit vulnerabilities in OT. By implementing basic security measures, you can better protect your farm. Start with:
- Regularly updating software to patch unknown vulnerabilities.
- Using multi-factor authentication (MFA) for all critical systems.
- Ensuring that devices — such as GPS systems, automated feeders, and irrigation controls — are not connected to public networks.
4. Work with experienced cyber security partners
Cyber security isn’t just about installing software — it’s about a holistic strategy that includes people, processes and technology.
- Engage with professionals to assess risks and strengthen defences.
- Leverage managed security services for proactive monitoring and protection if you have a small or non-existent in-house team.
Turning risk into opportunity
While the cyber security landscape may seem overwhelming, proactive planning can turn these challenges into opportunities. Producers who invest in cyber security today will be better positioned to protect their operations, maintain trust with suppliers, and leverage technology safely for long-term growth.
The Canadian government and industry organizations, such as Cybersecure Canada, provide free resources and training programs to help farms strengthen their cyber security defences. Collaborating with experienced partners, like MNP, can also provide tailored solutions that fit the unique needs of agricultural operations.
If you’re ready to improve your farm’s cyber security, start by assessing your risks and developing a plan. Connect with an advisor to explore customized security solutions for your operation.
Connect with us to get started
Our team of dedicated professionals can help you determine which options are best for you and how adopting these kinds of solutions could transform the way your organization works. For more information, and for extra support along the way, contact our team.