Threat Landscape Grows Increasingly Dangerous for Manufacturers

Manufacturers remain the top target for cyberattacks in 2025, with the sector’s exposure to operational disruptions and a recognised skills gap driving risk across the economy. According to Sophos, half of manufacturers (51%) fell prey to ransomware and paid a ransom in 2025, with the average ransom around $1 million and the average recovery cost (excluding the ransom) approaching $1.3 million.

Exploited vulnerabilities became the most common root cause of breaches for the sector for the first time in three years, while 58% of affected organisations used backups to recover. Notable incidents included Jaguar Land Rover’s September ransomware attack, which shut production for most of a month and was reported to cost between $1.7 billion and $2.4 billion, and a similar late‑September attack on Asahi Group Holdings causing beer shortages.

The piece also highlights ongoing concerns about AI adoption increasing the attack surface, and cites the US CISA’s December best practices document for manufacturers as part of the evolving security guidance.