In the 12 months from March 2025, industrial organisations accounted for 29.6% of all ransomware activity on average.

Industrial organisations experienced 2,073 ransomware attacks in the 12 months from March 2025.

Nearly 70% of organizations operate in manufacturing and critical infrastructure sectors under shared IT/OT governance models.

Ransomware attacks against industrial organizations increased 64% year-over-year.

Only 2% of organizations in industrial and critical infrastructure environments use enterprise-grade authentication such as 802.1X.

Manufacturing accounts for more than two-thirds of all ransomware victims.

The number of ransomware groups targeting industrial organizations increased 49% year-over-year to 119 groups, collectively impacting 3,300 organizations globally.

Approximately 98% of observed wireless networks rely exclusively on Pre-Shared Key (PSK)–based authentication.