Ransomware Attacks on Manufacturers Up 40% in H1 2026
Ransomware attacks on manufacturers rose 40 percent in the first half of 2026, with groups exploiting the supply-chain disruption that follows operational shutdowns.
Morgan "airgap" ReyesRansomware attacks on manufacturers rose 40 percent in the first half of 2026. SecurityWeek reports the figure from recent research, citing increased exploitation of supply-chain disruption caused by operational shutdowns.
The sector’s attack profile is structural. Operational technology environments carry longer patch cycles than enterprise IT. Production downtime converts to measurable output losses immediately, which compresses the decision window for affected organizations.
Active groups in 2026 have targeted manufacturing alongside healthcare and critical infrastructure. Talos published incident data Wednesday showing The Gentlemen more than doubled leak-site listings from January to July, with manufacturing in the victim mix. Qilin ranked second; the Talos report notes observed AI use in their operations.
Analysis: Whether the 40% H1 figure reflects new group interest in manufacturing or volume growth from operators already active in the sector is unconfirmed. The supply-chain disruption angle is consistent with previous years’ targeting logic for the sector.
Related: Veradigm patient breach after ransomware activity, Manchester Airports extortion claim.
Found this useful? Share it.
