A Cyberattack Takes Down a Dairy—and a Family Vacation
Crying over spilled milk.
Most people want to do the right thing. They just don’t know what it looks like. That's why I write Stan’s Corner: to make cybersecurity visible. Every story is a reminder that security isn’t about perfection—it’s about paying attention, asking questions, and having the courage to act.
The Crash.
Paul left the office around 5:30 Friday. Not because the work was done. The ransomware chaos that began mid-May was still running the show—and would for months. But it was time for Paul to go home and tell his wife and kids something he'd been dreading: their planned summer trip to Japan was off.
Paul is President of Green Grass Dairy, a regional milk producer just outside Los Angeles. $75 million in annual revenue. Nearly 200 employees. A Southern California success story—until the attack.
Three weeks earlier, the ransomware attack had shut down production completely. No production meant no deliveries meant no sales which meant $2 million in lost revenue. Another $1 million was lost in spoiled milk.
Three weeks later, when they finally limped back online, they were only at 75% capacity.
The Recovery.
Paul realized it would take a while to right the ship, that recovery wouldn’t be quick. That's why he had to cancel their holiday.
His leadership team estimated 60-90 days.
They had to win back grocers who’d replaced Green Grass with a competitor.
They had to win back suppliers who had moved on, shipping their raw milk to other dairies.
Paul was drowning in legal and insurance negotiations. His carrier was making noises about denying the claim over a technicality. His bank raised capital lines to assist on the recovery —but with an extra 25 basis points.
And, to say the least, his investors weren't happy.
And equally as important, Paul knew that recovery meant implementing reasonable security controls. There was no way he wanted to go through this again.
The Post-Mortem
As Paul and his leadership analyzed the breach, they learned how different things would have been had Green Grass had a "discipline of cybersecurity."
The consultants they hired said it plainly:
With basic cyber hygiene, the attack likely would have failed.
With better preparation, they could’ve cut recovery time from 3 weeks to 1—and stopped the financial bleeding.
But they didn’t have either. Which is why Paul had to cancel his family's trip to Japan.
If this story motivates you to want to do better, please reach out. I’m the founder / president of SecureTheVillage, a nonprofit making a difference. We work with smaller businesses, nonprofits, and the MSPs who serve them. Email me now to protect your assets and minimize the impact of inevitable disruption. StanStahl@Substack.com.