As manufacturers increasingly integrate digital systems and physical infrastructure, the sector has become a prime target for cybercriminals aiming to disrupt production, steal intellectual property, and cause widespread damage.

The warning comes from cybersecurity and managed security services provider, Trustwave which has released a series of reports detailing the threats facing the manufacturing sector.

The annual report from the Trustwave SpiderLabs team identify the key trends shaping the manufacturing industry, including the rise of ransomware attacks, the convergence of operational technology (OT) and information technology (IT), and the expanding threat landscape.

The report breaks down the threat actor tactics, techniques, and procedures (TTPs), categorised by the different stages of an attack, equipping manufacturers with vital knowledge to strengthen their cybersecurity defences.

Trustwave has also produced two in-depth analyses focused on the most pressing concerns in the sector: the growing risks associated with IT/OT convergence and the evolving methods threat actors use to target manufacturers.

The manufacturing sector has been the most targeted industry for cyber-attacks for three consecutive years, and last year, the NIST 2024 Annual Report on the US Manufacturing economy found that manufacturers lost between $8.3 billion and $36.3 billion due to cybercrime.

The report revealed:

• The average cost of a breach in this sector averages around $5.6 million
• 87% of attacks originated from phishing.
• 14% of ransomware attacks targeted machinery manufacturers.

“The manufacturing industry is embracing new technologies and ways of working that are driving efficiency, productivity, and innovation speed,” said Kory Daniels, CISO at Trustwave. “It’s exciting to see AI-powered machines, smart factories, digital twins, and 3D printing in action, but it’s impossible not to consider the potential risks. This isn’t just about data breaches anymore—compromised systems can lead to production shutdowns, environmental disasters, and even worker injuries. Rapid innovation demands red teaming and testing to keep up with the pace, or we risk inadvertently prioritizing business benefits over known risks.”

The report highlighted the increasing complexity of cybersecurity in manufacturing, driven by the sector’s reliance on interconnected systems that span shop floors, enterprise networks, and supply chains. The integration of IT and OT introduces multiple new attack vectors, making manufacturers vulnerable to a wide array of cyber threats. These include ransomware attacks that disrupt production and data breaches that expose valuable intellectual property.

According to CISA, there are currently over 1,200 vulnerabilities and security issues associated with OT systems from more than 300 original equipment manufacturers and system providers. This, along with the convergence of IT/OT leaves manufacturers vulnerable to compromise, which in today’s world can lead to physical damage and disruption, even harm to human life.

“Even more critically, security incidents involving OT systems can have dire safety consequences,” Trustwave added. “A compromised industrial control system (ICS) could lead to dangerous malfunctions, hazardous material releases, or even physical injuries on the production floor.”