Cyber attacks 

And suddenly nothing works

Whether it's blackmail, password theft or data leaks - even your company can be the target of hacker or cyber attacks with potentially serious economic consequences. Bodo Herold shows how you can protect your systems against them.

Digitalisation has significantly increased efficiency and productivity in agriculture. However, increasing connectivity also comes with increased risks. Cyber criminals exploit vulnerabilities in IT systems to steal data, disrupt operational processes or extort ransom money. The attacks on AGCO in spring 2023, Grimme (November 2023) and Lemken (May 2024), for example, are not isolated incidents, but part of a worrying trend. However, it is not just corporations, smaller companies and public authorities that are affected - hackers are not stopping at machine fleets, milking robots, wind power and biogas plants or cash register systems on farms.

Not only large companies, but also agricultural businesses are at risk from hacker attacks. Photo: StockUp _stock.adobe.com

What types of attack are there? 

  • Phishing attacks aim to obtain sensitive information such as passwords or bank details through fake emails or websites. You are tricked into disclosing personal data or opening malicious links. Studies show that almost half of successful cyber attacks are initiated by phishing emails.
  • In ransomware attacks, cyber criminals introduce malware that encrypts data and thus prevents access to it. They then demand a ransom for decryption.
  • Malware, on the other hand, is an umbrella term for malicious software such as viruses, worms or Trojans that can infiltrate systems, steal or destroy data and impair the functionality of devices. It can be spread via infected e-mail attachments, downloads or unsafe websites. 

Awareness of these types of attack is the first step in implementing appropriate security measures.

Real cases as a warning signal 

Last summer, hackers in Switzerland paralysed a milking robot and a farmer's computers and demanded a ransom of the equivalent of almost €10,000. In the end, the criminals came away empty-handed, but the farmer suffered monetary losses of over €6,000. Such incidents highlight the real dangers and emphasise the need for farmers to take preventative measures. 

How can you protect your business from cyber attacks?

You should consider the following measures:

  • Raising awareness and training. People are often the biggest weak point when it comes to IT security. Therefore, regularly train yourself and your employees in dealing with digital threats. How can you recognise phishing emails (e.g. suspicious links, unusual sender addresses, conspicuous spelling mistakes)? What should you do in an emergency? The earlier you prepare for a possible threat situation, the less damage an attack can cause.
  • Update your systems. Always keep your software and hardware up to date so that the systems can defend themselves. Regular updates close known security gaps and increase protection against attacks. It doesn't cost any money! Failing to update often does. After all, updates that are installed too late or not at all are one of the most common reasons for successful cyber attacks.
  • Implement security solutions. Use antivirus programmes and firewalls to prevent unwanted access. These should be updated regularly and customised to the specific needs of your business.
  • Data backup. Carry out regular backups of your data and store them in secure locations separate from the main system. The cloud is a good additional backup method here. This allows you to quickly recover in the event of an attack.
  • Use secure passwords and password managers. Many attacks are made possible by using passwords that are too simple or the same passwords for different programmes, services or access points. Basically, the longer the better. A good password should be at least eight characters long and contain both upper and lower case letters. Ideally, it should also contain special characters and numbers. A password manager can help you to generate strong passwords and avoid having to memorise them.
  • Restrict access rights. Only grant employees access to the systems they need for their work. Restricted access minimises the damage caused by a hacked account.

Insuring the remaining risk

Unsurprisingly, the global insurance market for cyber risks is growing like no other - and to date, only a fraction of cyber risks are insured. The majority of the premium volume comes from corporations, while medium-sized companies often still bear their cyber risks themselves. Specialised policies not only help to cover the financial losses caused by hackers, but also reimburse the costs associated with repairing the damage. These include, for example, the payment of legal assistance and investigators.

By Prof Dr Bodo Herold, heroldconsult.com, Burscheid and
Thomas Künzel, DLG Mitteilungen

Conclusion

Even though burglaries in Germany have risen again in the past two years, in 2023 they are almost 50 % lower than in 2015. 

In contrast, cyberattacks have more than doubled in the same period (excluding unknown attacks, which are many times higher). Criminal attacks are therefore increasingly shifting to the digital world. Conversely, such a development means that companies need to pay more attention to cyber security. 

The experience of burglaries applies: Criminals attack where there appears to be the least protection.