Why Is Manufacturing the Most Targeted Sector for OT Cyber Attacks?
Summary: Dragos reports that manufacturing accounted for more than two-thirds of all ransomware victims among industrial organizations in 2025, with 119 ransomware groups tracked targeting industrial organizations, a roughly 49 percent increase from 2024, collectively impacting more than 3,300 organizations. Dragos observed affiliates using valid credentials and compromised remote access to reach VMware ESXi hypervisors hosting SCADA, HMI, historian, and engineering workloads, producing Loss of View, Loss of Control, and multi-day production outages without touching industrial protocols.
Why it matters: Shared IT and OT domains appeared in nearly half of manufacturing assessments - more than three times the rate seen in oil and gas and electric environments - and 24 percent of manufacturing sites have no OT/ICS incident response plan at all, the highest of any sector.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026