The food and agriculture sector faces growing risks of cyberattacks, which could cause widespread chaos, from malfunctioning tractors to contaminated food supplies. However, the U.S. Department of Agriculture (USDA), responsible for safeguarding this critical sector, appears ill-prepared for the digital threats that loom. Policymakers, experts, and even the USDA itself have raised alarms about the department’s limited ability to address cyber risks.
The USDA’s role in protecting the food and agriculture industry is critical. This sector contributes over 5% to the U.S. economy and accounts for approximately 10% of U.S. jobs. Yet, the department has assigned the cybersecurity task to an underfunded office handling a variety of unrelated missions, signaling a lack of urgency in confronting these escalating cyber threats.
The Rising Cyber Threats The growing digitalization of agriculture, from GPS-guided tractors to cloud-connected devices that monitor crops and livestock, has made the sector increasingly vulnerable to cyberattacks. As hackers turn their attention to high-value targets like hospitals and power grids, the food sector has largely escaped the spotlight—until now. The 2021 ransomware attack on meat-processing giant JBS, which disrupted plants across the country and risked spiking beef prices, demonstrated how fragile the system could be.
Mark Montgomery, senior director at the Center on Cyber and Technology Innovation, warns that the food sector’s turn to become a major target is inevitable. “We’re dodging a bullet right now,” Montgomery said, adding that if the USDA doesn’t prioritize cybersecurity, it will fail the sector.
Potential Cyber Nightmares The food supply chain could be thrown into disarray by a variety of cyber incidents. Hackers could sabotage food-processing plants, disrupt logistics systems for distributing food, or manipulate data to create false outbreaks of diseases in crops or livestock. A cyberattack could lead to a massive disruption in the food supply, affecting prices, foreign trade, and potentially triggering food shortages.
Despite these threats, the USDA has been slow to embrace its role in cybersecurity. While other government agencies have aggressively tackled digital threats, USDA’s investment in securing the food sector has been minimal. For instance, the USDA’s Office of Homeland Security, responsible for these cyber missions, operates on a $1 million budget with only 55 employees, a stark contrast to the larger budgets of agencies like the Department of Energy or Health and Human Services.
A Lack of Urgency The USDA’s reluctance to address these issues stems partly from a cultural mindset that views cybersecurity as a lower priority. Frontline staff are eager to help protect the sector, but leadership has been hesitant to allocate resources or make cybersecurity a key focus. In comparison, agencies such as the Department of Energy have robust leadership engagement and industry partnerships that actively enhance their cybersecurity defenses.
Critics point out that the USDA is missing a crucial opportunity to improve its cybersecurity posture. The department has a nationwide network of agricultural advisors in land-grant universities, trusted by rural producers, that could be leveraged for cyber outreach and awareness programs. Unfortunately, this initiative remains untapped.
Growing Attention and Calls for Action As cyber risks increase, more attention is being paid to food and agriculture cybersecurity. Recently, the FBI hosted a conference on cyber threats to farming, and Congress introduced the Farm and Food Cybersecurity Act, which aims to address these concerns. The White House has also expressed concern, dispatching an adviser to the USDA to help strengthen its capabilities.
However, these efforts will require significantly more funding. The USDA’s latest budget proposal requested only $500,000 for cybersecurity work, while House Republicans have proposed a mere $225,000. Experts argue that without proper funding, the USDA cannot fulfill its mission to safeguard the nation’s food supply from cyber threats.
The bottom line is that the cybersecurity challenges facing food and agriculture are real, and the consequences of inaction could be disastrous. The USDA must act swiftly to confront these growing threats and protect the nation’s food supply before it becomes the next major target.
