Dairy Farmers of America

Dairy Farmers of America (DFA), the largest dairy cooperative in the USA, experienced a ransomware attack that disrupted multiple dairy manufacturing plants. The ransomware group Play claimed responsibility, stating they stole confidential data including budget, payroll, accounting, taxes, and financial info. DFA has not confirmed the extent of the data breach or if a ransom was paid. The attack caused operational disruptions, affecting the processing and receiving of milk. DFA is working with IT professionals and cybersecurity experts for full recovery.

Source: https://www.comparitech.com/news/ransomware-gang-says-it-hacked-dairy-farmers-of-america-demands-payment-in-3-days/

TPRM report: https://scoringcyber.rankiteo.com/company/dairy-farmers-of-america

"id": "dai902062425",
"linkid": "dairy-farmers-of-america",
"type": "Ransomware",
"date": "6/2025",
"severity": "100",
"impact": "",
"explanation": "Attack threatening the organization’s existence"

{'affected_entities': [{'industry': 'Food and Beverage',
                        'location': 'USA',
                        'name': 'Dairy Farmers of America',
                        'size': '18,000 employees',
                        'type': 'Organization'}],
 'data_breach': {'data_exfiltration': True,
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['budget',
                                              'payroll',
                                              'accounting',
                                              'taxes',
                                              'financial info']},
 'description': 'Ransomware group Play took credit for a cyber attack on Dairy '
                'Farmers of America, disrupting multiple dairy manufacturing '
                'plants and stealing confidential data including budget, '
                'payroll, accounting, taxes, and financial info.',
 'impact': {'data_compromised': ['budget',
                                 'payroll',
                                 'accounting',
                                 'taxes',
                                 'financial info'],
            'operational_impact': 'Disruption of dairy manufacturing plants',
            'systems_affected': 'Multiple dairy manufacturing plants'},
 'investigation_status': 'Ongoing',
 'motivation': 'Financial',
 'ransomware': {'data_encryption': True,
                'data_exfiltration': True,
                'ransomware_strain': 'Play'},
 'references': [{'source': 'Comparitech'}],
 'response': {'containment_measures': 'Contained the threat and restored '
                                      'operational facilities',
              'incident_response_plan_activated': True,
              'recovery_measures': 'Working with IT professionals and '
                                   'cybersecurity experts for full recovery',
              'third_party_assistance': True},
 'threat_actor': 'Play',
 'title': 'Ransomware Attack on Dairy Farmers of America',
 'type': 'Ransomware'}