INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).

Australian sugar producer hit by ransomware attack from Lazarus

| 2026-06-18 14:20 CRITICAL LOW RANSOMWARE & EXTORTION DATA BREACH
JSON
Executive Summary
AI-generated
A cyberattack disrupted operations at Mackay Sugar, Australia's second-largest sugar producer, on June 10, 2026. The company is investigating claims by a ransomware group known as Gentlemen, which claimed responsibility for the incident and threatened to publish allegedly stolen data if a ransom is not paid. Gentlemen emerged in late 2025 and operates a ransomware-as-a-service model, offering affiliates up to 90% of ransom payments, employing double-extortion tactics by stealing data in addition to encrypting systems. The attack affected Mackay Sugar's operations across one of Queensland's largest cane-growing regions, with two mills suspended since June 10, while the third facility avoided disruption. As a result of Australian law requiring victims of ransomware attacks to report extortion payments made to cybercriminals on their behalf, Gentlemen is believed by security researchers to be led by an unknown Russian speaker, affecting approximately three sugar mill operations and potentially impacting $420 million in annual revenue.
Technical Mitigations AI-generated
• Block or hunt for the Gentlemen ransomware group's double-extortion tactics by monitoring for stolen data and encrypted systems. • Patch vulnerable systems to prevent exploitation of known vulnerabilities, such as those that could be exploited by Qilin, Embargo, LockBit, Medusa, and BlackLock. • Verify authenticity of dark web leak sites before making any payments or communicating with ransomware groups.
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
QilinQilinEmbargoEmbargo
Target & Sectors
FIVE_EYES FIVE_EYES ASEAN ASEAN
Incident Timeline
‎2026/06/18
The Australian sugar producer, which generates over $420 million in annual revenue and supplies raw sugar to several countries, is investigating claims by the ransomware group Gentlemen that it will publish allegedly stolen data if a ransom is not paid.
financial $420 mills
The company, which operates three mills and says it generates more than $420 million in annual revenue, supplies raw sugar to domestic customers and export markets including South Korea, Indonesia, Japan and Malaysia.
Tactical Metrics
Metrics
financial
420,000,000
Mills
The company, which operates three mills and says it generates more than $420 million in annual revenue, supplies raw sugar to domestic customers and export markets including South Korea, Indonesia, Japan and Malaysia.
Intelligence Sources
TheRecord 2026-06-18