Nearly 90% of UK industrial firms hit by cyberattacks in past year
21 November 2024 
Almost 90% of UK industrial organisations have experienced at least one cybersecurity incident in the past 12 months, with many suffering repeated breaches, according to a new survey by the cybersecurity company Kaspersky. It quizzed 406 executives in UK enterprises with more than 1,000 employees in sectors such as manufacturing, energy, and oil and gas.
In the energy sector, 95% of the organisations surveyed reported being targeted, often resulting in downtime and financial losses. The report says that industries are shifting their focus from preventing cyberattacks to mitigating the damage.
The survey reveals that one of the sector’s biggest concerns is the vulnerability of connected and IoT devices, with 21% of those surveyed ranking IoT vulnerabilities as their top worry. The rapid adoption of IoT by industry has expanded the attack surface, creating new entry points for cybercriminals.
Human factors continue to pose a significant risk, with 18% of respondents identifying insider threats as a persistent problem, alongside concerns about unauthorised access and credential theft. Kaspersky says that this highlights the need for stronger access controls and monitoring of illicit activities by employees.
The survey also identified barriers that are preventing organisations from fully understanding cybersecurity issues. A quarter of respondents cited confusing technical jargon and a lack of clarity, while a similar number pointed to difficulties in quantifying cyber-risks and balancing regulatory compliance with operational efficiency.
Budget constraints, sometimes considered as a significant hurdle, were less prominent, with only 20% of respondents citing them as a major concern. Kaspersky says that this suggests that understanding, rather than cost, is the main obstacle to implementing more effective cybersecurity defences.
As industrial operations rely increasingly on interconnected systems and automation, vulnerabilities in OT (operational technology) environments have come to the fore. OT is particularly susceptible to targeted cyberattacks, according to Kaspersky.
Many organisations are finding it difficult to secure these systems, leaving them exposed as the threats shift from IT networks to OT infrastructures. The research highlights the importance of closing this gap before it leads to more severe incidents, which could affect both production lines and national infrastructure.
“Our research shows that cyberattacks in industrial sectors are not a matter of ‘if,’ but ‘when’, says David Emm, principal security researcher at Kaspersky. “As businesses digitise and connect more of their operational technologies, the need for robust and holistic cybersecurity strategies has never been more pressing. Organisations must address both IT and OT vulnerabilities if they are to stay ahead of and manage the evolving threats landscape.”
Kaspersky offers various forms of support to protect against cyberattacks including: centralised asset and risk management; security and compliance audits; helping organisations to identify vulnerabilities and misconfigurations in their networks; training and upskilling; real-time vulnerability feeds that help companies to identify and patch weaknesses; and detecting and responding to threats such as zero-day exploits and ransomware.
- Russian-headquartered Kaspersky announced last month that it is closing its UK office with the loss of up to 50 jobs. The company will continue to operate in the UK through partner channels. Earlier this year, Kaspersky was banned from selling its products in the US after being accused of having links to the Russian Government – which it denies.
