The outage is now also a data-theft verification problem. Mackay Sugar says it found evidence that an outside party reached parts of its IT environment, so the work is no longer just restoring mills and harvesting systems but checking whether anything was copied and could be published.
On day 3, the company said it was reviewing the Gentlemen group’s public leak claim and trying to confirm what, if anything, was accessed. The attack already shut two mills on June 10 and slowed harvesting across Queensland’s Mackay region, but the new issue is that a recovery-only response can miss the disclosure risk if data already left the network.
Gentlemen says it will post allegedly stolen data if it is not paid. That turns the incident into a live extortion case, with operational recovery now tied to forensic validation and the chance of public release.