Another critical infrastructure farming cooperative has been hit with a ransomware attack. Crystal Valley is a farming and grain supply cooperative based primarily in the state of Minnesota, with some locations throughout Iowa. On Tuesday, Crystal Valley disclosed publicly that their systems were compromised at several levels, including IT systems and payment systems. At this time the threat group behind the operation is unknown, however CTAPT will follow up with an update accordingly when/if the group is revealed. The initial attack occurred on Sunday and the company was immediately notified that several systems were infected which halted daily operations. This is the second major infrastructure cooperative to be hit this week, with the other being BlackMatter and the NEW Cooperative. Judging based off the events that have unfolded, the Ankura CTAPT believes that critical infrastructure is once again under attack and predicts that other critical infrastructure entities will be compromised.