In recent years, we have seen a strong increase in cyberattacks against the manufacturing sector, which will eventually become the main target of malicious cyber operations in 2023.
In fact, according to data collected and classified by Hackmanac, incidents toward this sector have risen from 5% of the total in 2022 to 16% in 2023, certainly a very significant trend.
The recent “IBM Security X-Force Threat Intelligence 2023” report also notes that, for the second year in a row, the manufacturing sector has been confirmed as the most affected by cyber attacks.
This trend highlights a growing concern about this industry's ability to effectively protect its critical assets and operations.
But why is this industry so targeted by cybercrime?
Here are the main reasons.
Factors that make Manufacturing an attractive target
Cyber threats are becoming a more pressing issue than ever as a result of the increasing reliance on IT systems to keep manufacturing lines running.
In addition to increasing the overall attack surface, cyber criminals are using more sophisticated and refined techniques and are able to compromise victims' systems more effectively. Their aim is to disrupt manufacturing processes in a way that significantly amplifies their impact, mainly (but not only) for extortion purposes.
The reasons why the manufacturing industry are such a prime target for cybercrime thus lie in a number of key factors:
- Manufacturing has a low tolerance for downtime: cyber criminals know that they can take advantage of the situation and, more importantly, that the success rate of their extortion towards this industry is very high. Unfortunately, very often manufacturers under attack prefer to pay the ransom, creating a vicious cycle.
- It is a high-value target: manufacturing companies own valuable intellectual property as well as sensitive data, making them lucrative targets for cybercriminals even for purposes of stealing designs, techniques and information about production processes.
- Cybersecurity aspects are not the priority: focusing mainly on the production process, which is its core business, industries tend not to consider themselves potential victims by cybercrime, often ignoring the size of their attack surface.
- Supply Chain amplifies of risks: the supply chain is a difficult area to control and can expose to significant cyber security risks. For this reason, a successful attack toward Manufacturing can cause enormous damage, cascading not only to its own facilities and processes, but also to Supply Chain organizations, going on to amplify the scope of the incident. In addition, it is estimated that the larger the number of victims involved by an attack, the more likely the primary target will end up paying the ransom, which is an added incentive for attackers.
- This is an area that makes extensive use of smart and IoT components: these types of devices are usually inadequate from a cyber security perspective, which increases the risks of privacy or data protection breaches.
Conclusions
The manufacturing sector's rapid adoption of digital technologies, coupled with its complex operational demands, has unfortunately made it a prime target for cybercriminals. The industry's reliance on IT systems, its low tolerance for downtime, and the valuable intellectual property it holds all contribute to its vulnerability.
Furthermore, the often-overlooked cybersecurity priorities and extensive supply chain networks create additional entry points for attackers, increasing the likelihood of large-scale disruptions.
The rise in cyber attacks against manufacturing underscores the urgent need for stronger defenses and better preparedness. To combat these threats, manufacturers must recognize cybersecurity as a critical component of their operations, investing in robust protections, educating employees, and building more resilient systems. By doing so, the industry can better safeguard its assets, processes, and data, ultimately minimizing the risk of devastating cyber incidents and financial losses.
Addressing these vulnerabilities will be key to ensuring the long-term security and success of the manufacturing sector in an increasingly digitized world.
Stay Cyber Safe!
