Technology is helping farmers become more productive and profitable, but it can also make them vulnerable to cybercrime.

Farmers hold business data and intellectual property that’s very attractive to cyber criminals. For example:

  • Criminals could use information about precision agriculture or smart farming processes for their own gain.
  • Malicious actors could sell farming information to competitors, both locally and overseas. They could also sell or use stolen information to gain an unfair advantage in the negotiation process with farmers.
  • Information in supply chains can also be vulnerable to cyber attack. Most farmers deal electronically with suppliers and their customers, creating masses of business data that cyber criminals can steal for financial benefit.

The good news is there are some simple steps you can take to keep your agribusiness safe.

How to protect your Agribusiness

1. Back up your business data regularly.

This could be as simple as copying your data onto a USB stick or a removable hard drive and storing it somewhere safe. It’s best practice to back-up your data on two different devices. You can also consider backing up your data to a secure cloud service.

Remember to disconnect the back-up device from the computer when you’re finished, as attackers are known to encrypt or delete back-ups connected to the computer or network.

It’s also important to test your back-up frequently by restoring data to a test location. This helps identify any problems, so you can be confident that your back-up will work in an actual crisis.

2. Use one computer that is for general family use, and one that is strictly for business. 

If your work computer is also used for social media, playing games, watching videos and streaming music by you or other family members, it's more vulnerable to security issues. That’s because non-work use increases the risk of accidentally clicking on a suspicious link or allowing malicious software to be installed. Use a separate computer for business tasks and banking to help minimise this risk.

3. Check emails carefully.

Cyber criminals commonly use email to deliver malicious software. Some  emails carrying malicious software or ransomware may appear to be a legitimate invoice from a farm supplier, an energy company or the ATO, for example.

Always check the sender address, ensure the request looks valid and consider whether the email is expected before responding to them. Be extra careful with emails that:

  • you’re not expecting
  • come from unknown senders or an unusual address
  • contain attachments or suspicious links.

Learn more about how to spot spam and phishing emails. You can also see the latest security alerts you need to be aware of.

4. Turn on Multi-Factor Authentication.

Add an extra layer of security to your email and banking accounts by turning on Multi-Factor Authentication (MFA). This means providing an additional piece of information, such as an SMS code sent to your phone or a security token, in addition to your password, when you access your accounts. This can prevent unauthorised access even if someone has your password.

5. Install anti-virus software on your computers and use an up-to-date operating system. 

It’s important to keep your anti-virus software up-to-date to protect yourself from the latest security threats. While trial anti-virus software is free, the software usually only updates during the trial period. Check your software to confirm that it's active and set to automatically update, scan and flag suspicious activity.

Also, turn on automatic updates for your computer’s operating system and programs. This will ensure your computer always has the latest security updates. Each operating system is slightly different, so if you're unsure check the Microsoft or Apple websites for information.

6. Remember that your business relies on other people's computers as well as your own. 

Don’t be afraid to ask your accountant, bookkeeper or business manager about their online security practices, to see how they’re protecting your data. Cyber criminals often target third parties to gain access to a business’s data.

If you’ve made a substantial investment in information technology, talk to an impartial advisor. People who sell the equipment might downplay the risks while people who sell cyber security might recommend more protection than is strictly necessary. No-one can guarantee that you won’t be hacked, but, like regular thieves, the majority of cyber criminals are opportunists. In most cases, all you need to do is convince them that they should move on to an easier target.

Helpful resources

How we can help

If you’re a NAB customer and you believe your business or personal accounts have been impacted by fraud or a scam, we’re here to help. Explore the immediate steps you can take to protect yourself and discover when you should get in touch with us to make a report.

Learn what to do in the event of fraud or scams

Get updates on the latest fraud alerts


IDCARE is Australia and New Zealand's not-for-profit counselling and support service set up to assist Australians impacted by identity theft and cyber-related crimes.

IDCARE can assist NAB customers to navigate through the process when identity details or credentials have been compromised through fraud or scams. IDCARE is a free service for all Australians.

Learn more about IDCARE, opens in new window

Australian Government | Australian Cyber Security Centre (ACSC)

The Australian Cyber Security Centre (ACSC) brings cyber security capabilities from across the Australian Government together in a single location. It’s the hub for private and public sector collaboration and information sharing to combat cyber security threats. ACSC provides topical, relevant and timely information on how home internet users and small businesses can protect themselves from, and reduce the risk of, cyber security threats such as software vulnerabilities, online scams, malicious activities and risky online behaviours.

Learn more about the Australian Cyber Security Centre, opens in new window

Australian Government | ReportCyber

ReportCyber is a secure reporting and referral service for cybercrime and online incidents which may be in breach of Australian law. The ReportCyber website provides a cybercrime reporting mechanism as well as helpful information about cybercrime.

Learn more about ReportCyber, opens in new window

Australian Competition and Consumer Commission | Scamwatch

Scamwatch provides information to consumers and small businesses about how to recognise, avoid and report scams using publications, videos and other online resources.

Learn more about Scamwatch, opens in new window

Australian Government | Office of the eSafety Commissioner

The Office of the eSafety Commissioner provides online safety education for Australian children and young people, a complaints service for young Australians who experience serious cyberbullying, and address illegal online content.

Learn more about the Office of the eSafety Commissioner, opens in new window

Australian Government | Attorney-General’s Department

The Attorney-General’s Department website provides helpful information and resources about your rights and protections in regards to identity security, freedom of information and cyber security. The Department has developed a range of resources to assist people protect their identity and recover from the effects of identity crime.

Learn more about the Attorney-General’s Department, opens in new window

Related articles

Important information