AGCO

AGCO, a global agricultural equipment manufacturer known for brands like Fendt tractors, suffered a **ransomware attack** that disrupted its operations. The attack forced the company to **temporarily shut down production facilities in Germany and France**, sending workers home while investigations continue. AGCO, which reported **$9 billion in revenue last year** and employs **21,000 people worldwide**, has not yet disclosed the ransomware strain or the initial breach method.The incident caused **operational halts**, directly impacting manufacturing and supply chains. While the full scope of data compromise (if any) remains unclear, the **production stoppage alone poses significant financial and reputational risks**, especially given AGCO’s role in global agriculture. The company’s reliance on just-in-time manufacturing exacerbates the disruption, potentially leading to **delays in equipment deliveries, financial losses from idle plants, and erosion of customer trust**. Recovery efforts are underway, but the attack underscores vulnerabilities in critical industrial sectors to cyber threats.

Source: https://www.acronis.com/en/tru/posts/agriculture-equipment-manufacturer-agco-hit-by-ransomware/

TPRM report: https://www.rankiteo.com/company/agco-corporation

"id": "agc3902039090925",
"linkid": "agco-corporation",
"type": "Ransomware",
"date": "9/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Agricultural Equipment Manufacturing',
                        'location': 'Global (HQ in Duluth, Georgia, USA; '
                                    'production affected in Germany and '
                                    'France)',
                        'name': 'AGCO',
                        'size': '21,000 employees',
                        'type': 'Corporation'}],
 'description': 'Global agricultural equipment company AGCO, creator of Fendt '
                'tractors and other popular tools, has been knocked offline by '
                'a ransomware attack. AGCO was forced to temporarily shut down '
                'some of their production in Germany and France, sending '
                'workers home. The company is still investigating the extent '
                'of the attack and has not disclosed the ransomware family '
                'responsible or the breach method.',
 'impact': {'downtime': 'Temporary shutdown (duration unspecified)',
            'operational_impact': 'Production halt in Germany and France; '
                                  'workers sent home',
            'systems_affected': ['Production systems (Germany)',
                                 'Production systems (France)']},
 'investigation_status': 'Ongoing (extent of attack and breach method under '
                         'investigation)',
 'ransomware': {'data_encryption': True},
 'references': [{'source': 'Cybersecurity article (unspecified)'}],
 'response': {'containment_measures': ['Temporary shutdown of production in '
                                       'affected regions'],
              'incident_response_plan_activated': True},
 'title': 'Ransomware Attack on AGCO Disrupts Production in Germany and France',
 'type': 'Ransomware Attack'}