PolicyBrief
S. 2866
119th CongressSep 18th 2025
Cybersecurity in Agriculture Act of 2025
IN COMMITTEE

This bill establishes five Regional Agriculture Cybersecurity Centers to research, develop, and train the agricultural sector against cyber threats, with a specific focus on adversaries like China and Russia.

Ted Budd
R

Ted Budd

Senator

NC

LEGISLATION

Farm Cyber-Defense Gets $25M Boost: New Centers to Protect Food Supply from Foreign Hackers Starting 2026

The newly proposed Cybersecurity in Agriculture Act of 2025 is straightforward: it sets up a dedicated, five-year program to defend the nation’s food supply from digital attacks. Think of it as putting a high-tech alarm system on the entire agricultural sector, from the tractors running on GPS to the complex supply chains moving food across the country. The bill authorizes $25 million annually from Fiscal Year 2026 through 2030 to establish five new Regional Agriculture Cybersecurity Centers (Section 2).

These centers won't just be doing theoretical research. They are tasked with creating real-time threat monitoring systems, building security operations centers to analyze attacks, and developing specific tools—like better intrusion detection and secure login systems—tailored for the farming industry (Section 2). The goal is to make sure that a foreign hacker can’t shut down a critical part of the food production system, whether it’s a grain elevator or a livestock operation.

Why Your Grocery Bill Needs a Firewall

When we talk about agriculture, we’re not just talking about farmers; we're talking about massive, interconnected systems that rely heavily on technology. If a cyberattack hits a major processing plant or a seed distributor, the disruption can quickly lead to higher prices and empty shelves at the grocery store. This bill is designed to stop that domino effect before it starts. The centers must build live testbeds—safe, simulated environments—to run attack-defense drills and test new security tools before they are deployed in the field (Section 2).

Crucially, the research and tool development are required to specifically target threats coming from adversarial nations, explicitly naming the People's Republic of China, Russia, North Korea, and Iran. This focus means the centers will be developing defenses against sophisticated, state-sponsored attacks, not just general malware.

The University Connection

Who gets to run these critical centers? The bill limits eligibility strictly to land-grant colleges or universities that already have strong programs in both food/agricultural sciences and cybersecurity (Section 2). This is a smart move because these institutions are often deeply connected to local farming communities and have the infrastructure to conduct specialized research. They must also show they can partner with regional industry groups, co-ops, and government agencies to secure local agricultural networks and train the next generation of cyber-savvy farm managers and IT professionals.

For students, this means new opportunities in a high-demand field, and for universities, it means significant federal funding to boost their research capacity. However, by limiting the pool to land-grant schools, the bill might miss out on specialized cybersecurity expertise housed in other tech-focused institutions. This limitation ensures the research stays grounded in agriculture, but it’s a trade-off.

The Fine Print on Foreign Threats

While the bill clearly names four countries, it also gives the Secretary of Agriculture the authority to designate “any other countries the Secretary determines to be a threat.” (Section 2). This flexibility is necessary to adapt to evolving global threats, but it also creates a bit of a gray area. The Secretary could, at any time, add a new country to the list, which would immediately shift the focus and priorities of the five regional centers. While this is a minor administrative point, it means the scope of the centers’ targeted defense could change based on geopolitical shifts and the Secretary’s discretion, without necessarily requiring a new act of Congress.

Overall, this bill is a proactive investment in protecting essential infrastructure. It connects federal funding directly to universities that are already plugged into the agricultural sector, focusing resources on preventing a real-world crisis—a food supply disruption—by tackling the digital threats that make it possible.