Dragos 2025 OT/ICS Cybersecurity Report, our 8th Annual Year in Review

75% of the ransomware cases Dragos observed involved disruption to operations to some degree.

Manufacturing remains the most affected sector by ransomware, accounting for more than 50% of observed ransomware victims.

In the first half of 2024, ransomware groups attacked an average of 34 industrial organizations per week. That number more than doubled during the second half of the year.

25% of the ransomware cases Dragos observed involved full shutdown of an OT site.

70% of the vulnerabilities researched were deep within the ICS network and 39% could cause both a loss of view and a loss of control.

Ransomware activity surged at an increase of more than 87% over last year.