27.7% of all attacks
Manufacturing took more cyber attacks than any other sector last year, for the fifth year running (IBM X-Force 2026).
Manufacturing by the numbers, 2026
61% ransomware
Of manufacturing breaches involved ransomware, and malware of some kind was in 75% (Verizon DBIR 2026).
61% third party
Of manufacturing breaches involved a supplier, vendor or partner (Verizon DBIR 2026).
£3m per UK breach
The average cost of a UK breach, with about 225 days to find and contain it (IBM UK Cost of a Data Breach 2026). The worldwide average for industrial businesses is £4m.
87% about money
Of attacks are financially motivated, and a further 15% are espionage, after your designs (Verizon DBIR 2026).
43% of UK businesses
Were hit by a breach or attack in the last year, rising to 69% of large firms (UK Cyber Breaches Survey 2025/26).
1,589 attempts a week
The number of attack attempts per UK organisation every week, up 34% on a year ago (Check Point, June 2026).
Only 31% at board level
Of UK businesses have someone at board level responsible for cyber, and only 25% have a written incident response plan.
The five threats that matter most
Ransomware
Involved in 61% of manufacturing breaches. Your systems are locked and your data stolen until you pay, or rebuild.
Unpatched systems
38% of breaches started with an exploited weakness in kit facing the internet. It's now the number one way in.
Supply chain attacks
61% of breaches involved a third party. Someone else's weak spot becomes your problem, and yours becomes your customer's.
Phone and text scams
40% more likely to work than an email. The fake call from IT asking for a code is the scam to watch.
Intellectual property leaking through AI
45% of staff now use AI regularly at work, 67% of them through personal accounts. Drawings, specs and source code are being pasted into tools you don't control.
What it really costs
Jaguar Land Rover, UK, 2025
Five weeks with no car production, an estimated £1.9 billion cost to the UK economy and more than 5,000 organisations affected (Cyber Monitoring Centre).
Asahi Group, Japan, late 2025
Ransomware closed its domestic factories, suspended shipments and put corporate data at risk.
Kreisel GmbH, Germany, 2024
Ransomware halted operations for weeks. It refused to pay, never recovered and filed for insolvency that November.
Why that matters to you
JLR had the size and the balance sheet to ride it out. Kreisel didn't. Most of the manufacturers I talk to in Essex, Kent and London look a lot more like Kreisel than JLR. Does that make sense?
The fundamentals checklist
1. Patch fast
Patch anything facing the internet within 14 days of a critical fix, and know who owns that job.
2. Multi-factor authentication
Turn it on for email, remote access and every cloud system.
3. Clean up accounts
Remove old accounts and limit admin rights to the few people who need them.
4. Backups you can trust
Keep offline or immutable backups, and test a restore at least twice a year.
5. Separate production
Separate your production network (OT) from the office network. OT and industrial cybersecurity
6. Brief your staff
Warn them about phone and text scams, with a simple call back to check rule.
7. One-page AI policy
Write it down and name the tools people are allowed to use.
8. Check suppliers
Ask key suppliers about their cyber standards and put a minimum in the contract.
9. Plan the first hour
Write down who does what in the first hour of an attack, including who rings the insurer.
10. Get certified
Get Cyber Essentials, then decide whether buyers need Plus or ISO 27001. Do I need Cyber Essentials?
Why cyber now decides tenders
For many public sector contracts, no Cyber Essentials certificate or proof of equivalent controls means no bid. It's a pass or fail gate, checked before anyone reads your price.
And you are somebody's supply chain risk. Six in ten manufacturing breaches now involve a third party, so your buyers are judging you on your cyber as well as your price and quality.
How YBSL helps
I'm not going to pretend to be your IT department. We look at your business the way a tender evaluator will, find what's missing and put the right specialist on each gap. YBSL is a CyberSmart Registered Partner for Cyber Essentials and Cyber Essentials Plus, so that route is already in place. Cyber Essentials support
The speed of AI. The judgement of a human. That's the difference.