The Hidden Cost of Supply Chain Breaches: 2025 Statistics on Downtime, Disruption, and Financial Loss

Supply chain breaches are escalating across industries, with breaches involving supply chains surging by 68% and now accounting for 15% of all data breaches, according to Deepstrike. In 2024, 35.5% of data breaches were linked to third parties, up from 29% the year before, and nearly one-third of all breaches now stem from third-party vendors or partners. Gartner forecasts that 45% of organisations will experience supply chain breaches by the end of 2025.

Downtime and disruption remain a dominant theme, with 100% of organisations impacted by cyber incidents reporting revenue loss due to downtime and an average of 86 unplanned outages per year, while more than 90% of mid-size and large companies lose over $300,000 for every hour their systems are offline.

Notably, the IBM Cost of a Data Breach Report 2025 lists the average cost of a breach at USD 4.91 million, and industrial-sector breaches averaged $5.56 million in 2024, with unscheduled downtime costing up to $125,000 per hour. The article also flags upstream risk, citing a major software supply chain attack that compromised 18 npm packages, and Jaguar Land Rover’s UK plants halting production at a cost of about £72 million per day.