Manufacturing leads ransomware targets in 2025 report
What happened
Manufacturing was the most targeted sector for ransomware in 2025, according to Check Point's latest threat analysis, which counted 1,466 incidents against manufacturers worldwide. Across all sectors, documented ransomware cases rose 32 per cent year on year to 7,419, placing manufacturing at the centre of current extortion activity. This matters for IT, Telecom & Cyber because capacity and lead-time signals can move supplier prioritization, award timing, and contingency lanes with 2025, 1,466, 56 as the clearest commercial anchors; buyers should plan for renewal uplift asks
Buyer takeaway
For IT, Telecom & Cyber, this is a staffing-shape signal: remote operating models can shift work offsite and change which suppliers, systems, and service levels matter most
Cost / money
The cost angle is directional, not quantified: moving work offsite can cut travel, rotation, and accommodation exposure, but only if the remote setup stays reliable
Supplier / commercial
Expect scope to move toward software support, communications uptime, cyber obligations, and clearer downtime liability instead of only offshore headcount or hardware supply
Safety / operations
Fewer people offshore can reduce exposure and emergency-response load, but the operating model becomes more dependent on connectivity resilience, remote support readiness, and cyber hygiene
What to watch
Watch bandwidth resilience, latency tolerance, cyber obligations, and who carries downtime cost if the remote link drops
Key facts
- Manufacturing was the most targeted sector for ransomware in 2025, according to Check Point's
- Across all sectors, documented ransomware cases rose 32 per cent year on year to 7,419, placi
- Production outages can halt output, disrupt safety controls, and affect suppliers and custome
- The US recorded the highest number of manufacturing ransomware incidents with 713 cases, foll
