Arla Foods has attributed the disruption of production at one of its units to a cyberattack , confirming to BleepingComputer that malicious activity affected the IT network at the Upahl factory in Germany .
The representative of the Danish multinational clarified that the incident was limited to the specific factory, but its impact is expected to be seen in the supply chain with possible delays or cancellations of product deliveries.
"We can confirm that we have detected suspicious activity at our Upahl dairy, which has affected the local IT network," Arla said. "Due to the security measures implemented, production has been temporarily."
See also: Legal Aid Agency: Data breach following cyberattack
Arla Foods is one of the largest international players in the dairy sector, with 7,600 cooperative members, a presence in 39 countries and over 23,000 employees. With an annual turnover of €13.8 billion, the company has brands such as Arla, Lurpak, Puck, Castello and Starbucks, which are distributed in 140 markets worldwide.
The company said it was making every effort to operations the factory's, with the aim of restarting production by the end of the week. Arla said production at its other facilities was continuing without disruption.
The first signs of the attack were detected on Friday and deliveries are already being affected, according to the company, which has informed its customers of possible supply chain.
«We have informed our affected customers about possible delays or cancellations.».
See also: Glibc vulnerability exposes Linux systems to attacks
Despite questions raised by BleepingComputer about the possibility of data theft or file encryption – features commonly associated with ransomware-type attacks – Arla chose not to disclose further details about the nature of the incident.
So far, there has been no mention by the company of known extortion portals used by ransomware groups, which leaves it unclear who is behind the attack and what technique was used.
The lack of evidence intensifies questions surrounding the attack, as the possibility remains open that it was a more serious security incident.
The Arla Foods cyberattack incident is indicative of the increasing vulnerability of critical industrial infrastructure, even in the food sector, which is often considered “low risk” from a cyberthreat perspective — which is clearly no longer the case.
See also: Glibc vulnerability exposes Linux systems to attacks
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
The fact that a giant like Arla was targeted indicates that the agri-food industry is no longer “invisible” to cybercriminals. Factories, logistics, refrigeration, warehouses — everything depends on networks and automation. An outage can have a huge impact.
All businesses should take protective measures to avoid such incidents. Cyber resilience is not just a “technical issue” — it’s a matter of business survival and consumer trust.
Source: www.bleepingcomputer.com
