From Chocolate to Crisis: How a Ransomware Attack Nearly Crippled a 150-Year-Old Candy Maker
This post narrates how a Canadian candy manufacturer, operating since 1873, faced a severe ransomware attack in February 2025. It explores the attack's operational and reputational consequences and presents vital takeaways for businesses across sectors.

On February 22, 2025, a ransomware attack slammed into Ganong Bros. - Canada’s oldest family-owned candy company. IT systems froze, factory production halted, and employees scrambled to salvage a 150-year legacy under siege FIPA Reports.
How It Unfolded
What started as a routine morning quickly turned chaotic. A malicious email, plausibly disguised, launched code that encrypted inventory controls and production schedules. Within minutes, chocolate mixing lines were offline, and batch tracking became impossible.
The Fallout
-
Operational freeze: Product bottlenecks and halted orders.
-
Legacy systems exposed: Aging tech lacked modern safeguards.
-
Recovery scramble: IT and execs banded to restore backups and reboot systems.
Lessons for All
-
Legacy infrastructure is ripe for cyber exploitation.
-
Incident response must be agile across IT and operational realms.
-
Backups, segmentation, and tabletop simulations are survival essentials.
Cyber threats don’t just breach networks, they can dismantle centuries of operational trust. Stay prepared, not reactive.
What's Your Reaction?






