Manufacturing Sector Faces Unprecedented Cyber Threats as Ransomware Dominates Financial Losses A new report from Resilience, The State of Cybersecurity in Manufacturing, reveals that the manufacturing industry remains the most targeted sector for cyberattacks, with ransomware accounting for 90% of total financial losses despite representing only 12% of claim volume. The findings, based on proprietary claims data, highlight severe vulnerabilities in the sector, driven by low downtime tolerance, underfunded security programs, and rapid adoption of connected technologies. ### Key Threats and Financial Impact - Ransomware remains the most financially damaging threat, with a single attack linked to the BlackCat ransomware group enabled by misconfigured multi-factor authentication (MFA), responsible for 26% of all portfolio losses. - Phishing and transfer fraud make up 30% of claims, underscoring human error as a leading cause of cyber disruption. - Wrongful data collection, primarily from website tracking and pixel-related litigation, drives 12% of claims, though operational data breaches remain a growing concern. ### Critical Security Gaps and Solutions Resilience’s data identifies five high-impact security controls to mitigate risk: 1. Auditing and validating MFA deployment to eliminate bypass conditions and enforce consistent policies. 2. Strengthening vulnerability management for external-facing systems to prevent ransomware exploits. 3. Implementing procedural controls for financial transfers (e.g., dual authorization) to combat phishing and fraud. 4. Extending security requirements to vendors, including contractual MFA and patching mandates. 5. Cyber risk quantification to align security investments with financial exposure. ### Emerging Risks on the Horizon - IoT device proliferation in manufacturing facilities is expected to double by 2030, expanding attack surfaces. - AI-driven phishing and deepfake social engineering are becoming more sophisticated. - Post-quantum cryptography poses a future threat, with fewer than 7% of global SSH servers currently using quantum-resistant encryption. ### Industry-Wide Challenges Despite being the most targeted sector for five consecutive years, many manufacturers still prioritize operational continuity over security upgrades. The report challenges this mindset, demonstrating that simple, implementable controls rather than complex overhauls can significantly reduce financial risk. The findings serve as a critical benchmark for security leaders, risk managers, and insurers, offering data-driven insights to harden defenses against evolving cyber threats.