Around June 10, 2026, a cybersecurity incident targeted Mackay Sugar, Australia's second-largest raw sugar producer, causing the immediate shutdown of the Farleigh and Racecourse milling facilities in Queensland. The attack disrupted critical operational technology (OT) and logistics systems, forcing the isolation of industrial control systems and the suspension of cane haulage and harvesting activities. This interruption occurred at the onset of the annual crushing season, impacting approximately 1,300 supplying farms and threatening regional agricultural output and supply chain stability.

• Incident Overview: Operational Paralysis

  • Targeting of Mackay Sugar during the critical window of the 2026 crushing season.
  • Immediate shutdown of two major sugar mills: Farleigh and Racecourse.
  • Suspension of all sugarcane milling and rail transport operations in the Mackay region.

• Technical Impact: OT and Logistics

  • Isolation of industrial control systems (ICS) implemented as a safety precaution to prevent lateral movement.
  • Disruption of logistics and scheduling software, halting cane haulage from farms to mills.
  • Compromise of operational systems required the implementation of manual interim processes to maintain critical business functions.

• Supply Chain Risk: Agricultural Disruption

  • Issuance of "cease harvesting" orders to approximately 1,300 predominantly family-owned farms.
  • High risk of crop viability loss due to the time-sensitive nature of the sugarcane harvest cycle.
  • Significant threat to the regional agricultural economy, as the mills process roughly 700,000 tonnes of raw sugar annually.

• Response & Containment Strategy

  • Engagement of third-party cybersecurity specialists for forensic analysis and root cause identification.
  • Coordination with local Australian law enforcement and relevant authorities to investigate the breach.
  • Focused recovery efforts aimed at the safe, verified restoration of OT systems to resume crushing operations.

• Critical Infrastructure Implications: Energy Sector

  • High systemic risk due to Mackay Sugar's cogeneration facility, which provides roughly one-third of the region's electricity.
  • Potential for cascading failures if OT compromise extended to power generation systems serving 27,000 households.
  • Highlights the vulnerability of converged IT/OT environments in agri-industrial sectors.