80% of Manufacturing Firms Hit by Cyber Incidents: Report

February 25, 2025 | Cybersecurity
By Ashwani Mishra, Editor-Technology, 63SATS

The manufacturing sector faces cyber threats disrupting production and supply chains. Digital tech— cloud computing, artificial intelligence (AI), and the Internet of Things (IoT)—heightens vulnerabilities, demanding robust cybersecurity.

A recent study by Omdia, conducted in partnership with Telstra International, revealed that 80% of manufacturing firms experienced a notable increase in security incidents or breaches in the past year, yet only 45% are adequately prepared to defend against them.

The study, which surveyed over 500 technology executives worldwide, highlights the critical challenges that arise from the convergence of traditional operational technology (OT) with modern information technology (IT).

While this convergence has the potential to enhance operational efficiency and scalability, it simultaneously multiplies the points of entry for cyber criminals.

Industry 4.0: A Double-Edged Sword

The drive towards Industry 4.0 has transformed manufacturing operations. Digital systems now enable real-time monitoring, predictive maintenance, and optimized production processes, dramatically improving operational resilience.

However, the very features that power these improvements—greater connectivity, automated systems, and centralized data management—also open the door to a host of cyber threats. Historically, manufacturers relied on air-gapping to segregate OT systems from corporate IT networks, thereby protecting critical infrastructure from external breaches. Today, however, the push for digital integration renders such traditional security measures obsolete, leaving companies exposed to sophisticated cyberattacks.

Recent high-profile ransomware attacks on companies like Halliburton, Schneider Electric, and others not only disrupted operations but also inflicted severe financial damage.

For instance, Halliburton, a global energy services leader, experienced a ransomware attack in August that resulted in losses of approximately $35 million. The breach forced the shutdown of critical IT systems and severed customer connections, highlighting how even industry giants are not immune to cyber threats.

Ransomware: The Preferred Weapon

Ransomware remains one of the most devastating forms of cyberattacks facing manufacturers today.

According to the World Economic Forum (WEF), the manufacturing sector consistently ranks as the most cyber-attacked industry worldwide, accounting for over 25% of global cybersecurity incidents. The unique nature of manufacturing operations, where prolonged downtime can have ripple effects across entire supply chains, makes these companies prime targets. In many cases, cybercriminals leverage ransomware to lock down systems, demanding exorbitant ransoms to restore access.

Schneider Electric, a multinational leader in energy management, recently fell victim to an attack by a ransomware group known as Hellcat. The group breached Schneider’s project tracking platform, stealing 40GB of sensitive data that included critical customer and operational details. In a twist that underscores the audacity of modern cybercrime, the attackers demanded a ransom of $125,000—but not in conventional currency. Instead, they bizarrely requested the payment in the form of baguettes. Although Schneider’s core systems remained operational, the breach exposed sensitive internal project data, illustrating the far-reaching implications of such attacks and how they can tarnish a company’s reputation.

A Call for Integrated Cybersecurity

Industry leaders stress that addressing these challenges requires a holistic and integrated approach to cybersecurity.

Geraldine Kor, Telstra International’s Head of Global Enterprise Business, warns that while the integration of IT and OT is essential for driving innovation, very few firms have matured their cybersecurity defenses to match the pace of technological change. “Greater connectivity between IT and OT is necessary to harness advanced technology for manufacturing innovation, but it increases the risks of a breach,” she notes, emphasizing the need for a clear, unified security strategy.

Ganesh Narayanan, Telstra International’s Global Head of Cyber Security, echoes these concerns and advocates for a multi-faceted approach to risk management. He recommends that organizations prioritize collaboration and planning, clearly define cybersecurity strategies, bolster technical expertise, and assign specific responsibilities for security oversight. Narayanan also stresses the importance of leveraging advanced cybersecurity tools and adhering to industry standards to expedite readiness. This integrated framework is essential not only to respond to cyber incidents but also to proactively mitigate risks.

The High Cost of Downtime

The financial implications of cyberattacks in manufacturing are profound. According to Omdia and Telstra’s report, incidents can cost individual firms between $200,000 and $2 million, with losses escalating when production control and enterprise systems are impacted.

Traditional security measures and fragmented approaches to cyber defense are no longer sufficient in today’s interconnected environment. Without a clear, integrated strategy and a culture that prioritizes cybersecurity at every level, manufacturers remain exposed to potentially crippling attacks. The experiences of Halliburton and Schneider Electric underscore the urgent need for companies to reassess their cybersecurity postures and invest in comprehensive risk management strategies.

As manufacturing firms forge ahead in their digital transformation journeys, the promise of Industry 4.0 must be balanced against the pressing reality of cyber threats. The rising tide of ransomware attacks, coupled with the financial and operational risks they impose, calls for a re-evaluation of cybersecurity strategies across the sector. By fostering a culture of cyber resilience, establishing clear accountability, and integrating advanced security measures, manufacturers can better safeguard their operations and secure their place in a rapidly evolving digital landscape.