Too Small to Be a Target? CyberPests Disagree

Aerial photo of farm buildings

Many farmers believe cybercriminals only target large corporations, government agencies or major food processors. Cybersecurity specialists at the University of Guelph say their experience tells a different story.

In 2019, a farmer contacted cybersecurity professor Dr. Ali Dehghantanha after a suspicious message appeared on the farm’s computer. The farm had been hit by ransomware—malicious software that locks files or systems and demands payment to restore access.

Since then, Dehghantanha and the University of Guelph’s Cyber Science Lab have responded to numerous agricultural cybersecurity incidents. According to the university, the laboratory handled dozens of incidents in southern Ontario during 2025 and receives approximately one request for assistance from farmers each week.

Some incidents have involved more than inaccessible files. Dehghantanha reported encountering attackers associated with Russia and China who obtained access to farm power systems and threatened systems supporting poultry and cattle. The university did not report that animals were harmed, but the incidents demonstrate how quickly a digital intrusion could become an animal-welfare and farm-operational emergency.

Connected feeders, ventilation controls, milking equipment, sensors, drones and power-management systems provide valuable benefits. They can also create additional points of entry if default passwords remain unchanged, software is not updated or remote access is poorly protected.

Farmers should know which systems are connected to the internet, change default passwords, use a different password for every important account, enable multifactor authentication and maintain offline backups. Farms should also have a written plan for operating essential equipment manually and contacting vendors when a cyber incident occurs.

Being a small or family-owned farm does not make an operation invisible. Automated criminal tools can search the internet continuously for vulnerable equipment and accounts without knowing—or caring—who owns them.

Visit CyberPest Management Resources for practical steps to protect your farm, equipment, and information.

Citation: University of Guelph. “Canadian Farms Must Prep for Cyberattacks.” April 2026. Read the original University of Guelph story.