Ministarstvo poljoprivrede, šumarstva i ribarstva targeted by Barracuda ransomware group

• Ransomware group: Barracuda
• Country: Croatia
• Sector: Agriculture and Food Production
• Announcement date: October 9, 2026

The Barracuda ransomware group has announced a significant data breach targeting the Ministry of Agriculture, Forestry and Fisheries of Croatia. According to an announcement made on a leak site, the threat actor claims to have successfully compromised the institution's digital infrastructure, specifically targeting sensitive databases and file servers.

The alleged attack and ransom demand

On October 9, 2026, the threat actor known as Barracuda announced that it had compromised data belonging to the Ministarstvo poljoprivrede, šumarstva i ribarstva. The group asserts that it has gained access to the ministry's main file server and has obtained full database dumps. This type of claim is characteristic of double extortion tactics, where attackers not only encrypt systems but also steal sensitive information to use as leverage during negotiations.

In their announcement, the group explicitly disputes recent official statements from the institution that claimed no breach had occurred. By contradicting these official denials, the attackers aim to increase pressure on the victim. To facilitate the return of the stolen data, the group is demanding a ransom payment of $50,000. While the group has made these claims, they did not provide any screenshots to support their assertions regarding the stolen data.

Details of the claimed data breach

The information allegedly exfiltrated by the Barracuda group is extensive and covers various aspects of the ministry's operations and the personal details of those it serves. The group claims to be in possession of several types of sensitive information, which could include:

• Personal data
• Agricultural records
• Contracts
• Contact information

Specifically, the alleged leaked data includes agricultural registration records, phone numbers, surnames, first names, photos, and various details regarding agricultural activities. Furthermore, the group claims to possess ministry contracts and other confidential documents. The scope and accuracy of these claims remain unverified and may only be clarified following internal investigations conducted by the institution.

The Ministry of Agriculture, Forestry and Fisheries of Croatia

The Ministarstvo poljoprivrede, šumarstva i ribarstva is the government body responsible for managing and regulating policies related to agriculture, forestry, and fisheries in Croatia. The organization operates in several critical areas, including sectoral development, food safety, and the sustainable management of natural resources.

Impact and organizational risks

This incident may pose a significant risk of exposing sensitive personal information belonging to Croatian residents. The nature of the alleged data, which includes names, contact details, and agricultural activity details, could facilitate identity theft and targeted phishing attacks against the affected individuals. Such attacks often use stolen personal information to gain trust and trick victims into revealing further credentials or financial information.

Because the victim is a government entity, the breach may lead to regulatory scrutiny and legal consequences under the EU General Data Protection Regulation (GDPR). Organizations in the public sector must maintain high standards of data protection to ensure public trust and compliance with stringent legal frameworks. The breach of a government body often triggers mandatory reporting requirements and intensive audits to determine the extent of the exposure.

In the broader context of cyber threats, ransomware groups like Barracuda continue to target essential services and government institutions to maximize their leverage. To defend against such threats, organizations typically implement multi-layered security strategies. This includes maintaining offline backups, implementing strict access controls, and conducting regular security audits. For organizations in the agriculture and food production sector, protecting the integrity of registration records and sensitive contracts is vital for maintaining operational continuity and public confidence in food safety and resource management.