Tech Translated

IT Security & Technology Blog

Practical IT insights for Australian businesses. Our team covers cybersecurity advisories, compliance updates, and plain-English explainers on the technology your business relies on, published regularly as the landscape shifts.

Orange NSW rural landscape and town centre

Ransomware Shut Two Sugar Mills Mid-Harvest — Central West, Take Note

This winter a ransomware crew called The Gentlemen forced two Queensland sugar mills offline in the middle of the crushing season and locked up a national gourmet food supplier a few weeks later. Different businesses, same lesson — and it lands squarely on food and agribusiness operators here in the Central West.

What actually happened

In June, The Gentlemen hit Mackay Sugar, Australia’s second-largest raw sugar producer, halting milling and cane haulage at two mills days into the season, with more than 1,300 family farms told to stop harvesting. Weeks later the same group claimed Queensland supplier Royal Foods. This isn’t bad luck — it’s an affiliate operation scaling up fast, and it doesn’t care how big you are.

Why this matters in the Central West

If you run a food-processing plant, cold store, cooperative or ag-supply business around Orange, Bathurst or Dubbo, the real threat isn’t just leaked data — it’s an operational stop during your busiest window. A locked plant system at the wrong time of year is a spoiled batch and a missed order, not just an IT ticket. Across our Central West client base the pattern is consistent: 5 to 40 staff, no internal IT person, and one owner or office manager who quietly “looks after” the systems on top of everything else. That’s a thin line between a Tuesday click and a stopped production line.

What to do before it’s your turn

  • Keep offline, tested backups you can actually restore from — not just a cloud sync, which ransomware can encrypt too.
  • Turn on multi-factor authentication for email, remote access and any farm or plant management platform.
  • Patch internet-facing gear like VPNs and firewalls quickly; that’s how these crews get their first foothold.
  • Write a one-page “who do we call” plan now, while it’s calm — not at 2am with the line down.
Not sure where your backups actually live, or whether they’d survive an attack? That’s the first question worth answering — see our cybersecurity overview or talk to us about a quick review.

Written by Michael Sacco, Head of Service Delivery, All IT Services. All IT is a managed IT provider supporting businesses across the Central West NSW, Sydney and Brisbane regions, with a focus on financial services, hospitality and not-for-profit sectors.


Frequently Asked Questions

The Gentlemen is a ransomware-as-a-service operation that emerged in September 2025 and has since risen to the second-highest victim count of any group in 2026. It is believed to be run largely by Russian speakers, recruits affiliates who keep the bulk of any ransom, and has hit several Australian organisations including Mackay Sugar and Royal Foods.

These businesses run on time-critical processing and logistics, so downtime is expensive and the pressure to pay is high. Many also have leaner IT and security setups than large corporates, which makes them easier to compromise. That combination is exactly what ransomware crews look for.

Run a food or ag business in the Central West?

We can check whether your backups, MFA and patching would actually hold up against a group like The Gentlemen — and fix the gaps before harvest, not after.




Related Guide

Cybersecurity for Sydney SMBs

Explore our complete guide to protecting your business from cyber threats.

Read the Full Guide →