One in three British manufacturers suffered a cyber attack in the past twelve months. That number, drawn from a survey of 123 companies by industry lobby group MakeUK, is striking enough on its own. What makes it genuinely alarming is the detail sitting just beneath it: only half of those manufacturers have a formal response plan in place. In an era when a single breach can shut down an entire factory network, that gap between exposure and preparedness is not just a business risk. It is a national one.
The Scale of the Threat Is No Longer Abstract
The figures land against a backdrop that gives them real weight. Jaguar Land Rover, the largest automotive employer in Britain, was forced to halt production across all its factories, offices and retail operations after discovering intruders in its systems in late August last year. The Cyber Monitoring Centre estimated the economic damage at at least £1.9 billion, likely making it the costliest cyber incident ever recorded in the UK. British law enforcement has since pointed to Russian state-backed hackers as the likely culprits, adding a geopolitical dimension that purely commercial security strategies are ill-equipped to handle.
JLR was not alone. FTSE 100 manufacturers IMI and Smiths Group both reported breaches within days of each other in early 2025. Retail giants including Marks and Spencer and the Co-op suffered costly intrusions around the same period. The UK government estimates cybercrime costs the economy £14.7 billion annually, and the pace is accelerating rather than slowing.
Connected Factories Have Created a Larger Attack Surface
The push for productivity through digital connectivity has introduced a painful irony. Manufacturers have spent years integrating their factory floors, supply chains and logistics operations into unified digital systems. That connectivity delivers genuine value, faster output data, leaner inventory management, smarter scheduling. But it also means that once an attacker gains a foothold, the potential blast radius is enormous. The JLR attack cascaded through suppliers and retail operations precisely because integration had made everything reachable from a single point of entry.
Generative AI is sharpening the threat further. Researchers have already demonstrated AI systems capable of probing and penetrating business networks with minimal human direction. The same technology that manufacturers are exploring to optimise production is being weaponised against them, and the asymmetry between attacker capability and defender readiness is growing wider.
What This Means for Technology Investment Decisions
For business buyers evaluating operational technology, industrial IoT platforms or enterprise security software, this environment fundamentally changes the calculus. Cybersecurity can no longer be treated as an IT line item bolted onto a procurement decision after the fact. Integrated threat detection, supply chain risk monitoring and incident response planning are now baseline requirements, not premium add-ons. Companies shopping for manufacturing technology in 2025 should be asking vendors hard questions about security architecture from the very first conversation, because the cost of getting it wrong, as the past twelve months have demonstrated, is measured in billions.
