Attacks using OT protocols surge by 84%, led by Modbus (57%), Ethernet/IP (22%), and BACnet (8%).

February 5, 2026

Attacks using OT protocols surge by 84%, led by Modbus (57%), Ethernet/IP (22%), and BACnet (8%). — This cybersecurity statistic was published by Forescout Technologies Inc in February 2026. It covers topics including Operational Technology, OT Protocols. The original data appears in 2025 Threat Roundup. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 1/29/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Attacks using OT protocols surge by 84%, led by Modbus (57%), Ethernet/IP (22%), and BACnet (8%). This data was published by Forescout Technologies Inc and covers Operational Technology, OT Protocols.

Where does this data come from?

This statistic comes from 2025 Threat Roundup, published by Forescout Technologies Inc on February 5, 2026. You can view the original report at https://www.forescout.com/resources/2025-threat-roundup/.

What cybersecurity topics does this cover?

This statistic relates to Operational Technology, OT Protocols. Browse more statistics on Operational Technology or from Forescout Technologies Inc.

CYBERSTATS

Attacks using OT protocols surge by 84%, led by Modbus (57%), Ethernet/IP (22%), and BACnet (8%).

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

Organizations with comprehensive OT visibility detect and contain OT ransomware incidents in an average of 5 days, compared to the industry-wide average of 42 days.

The average dwell time for ransomware in OT environments is 42 days.

KAMACITE conducted sustained reconnaissance of U.S. industrial devices from March through July 2025.

The number of ransomware groups targeting industrial organizations increased 49% year-over-year to 119 groups, collectively impacting 3,300 organizations globally.

87% of CIOs say AI agents are already embedded in critical operations.

Abuse of Amazon and Google infrastructure is responsible for more than 15% of attacks, up from 11% in 2024.

Browse by Topic

Stay Ahead of Cyber Threats