British manufacturers are pouring more money and attention into cybersecurity than ever before, yet a fresh industry report suggests that a single well-timed cyber attack could still catch nearly half of them flat-footed. The gap is not in the technology itself, but in the planning that determines what happens the moment something goes wrong.
That warning comes from Make UK, the trade body representing roughly 20,000 manufacturers across the country, in its newly released study titled Cyber Security in Manufacturing. The findings paint a picture of an industry that has made real progress on basic technical defenses while lagging badly on the organizational side of resilience, the part that determines how quickly a company can recover once an incident actually happens.
For an industry that underpins everything from automotive parts to food production, the timing matters. Manufacturing has become one of the most targeted sectors for cyber attack activity worldwide, in part because factory floors increasingly run on connected systems that were never designed with security as a priority. The Make UK report puts hard numbers behind that risk for the first time at this scale in the UK, and the numbers suggest many businesses are more exposed than they realize.
What the Report Found
According to Make UK’s research, roughly three in ten manufacturers experienced a serious cyber attack or security incident in the past year, either hitting their own systems directly or reaching them through a supplier further down the supply chain. Of those affected, about a third reported a real financial or operational hit. The remaining two-thirds avoided serious damage, largely because existing safeguards were enough to contain the problem before it spread.
That split is telling. It suggests that when manufacturers do invest in basic protections, those protections often work. The trouble is what happens next, once an attacker has already gotten a foothold.
Strong on Prevention, Weak on Response
Survey respondents reported solid adoption of foundational cybersecurity tools. Ninety-two percent said they have firewalls in place, and 80 percent have malware protection running. Secure system configurations were reported by 67 percent of manufacturers, and 61 percent said they enforce access controls to limit who can reach sensitive systems.
Patch management told a different story. Only 36 percent of manufacturers said they consistently apply security updates and patches, a gap that leaves known vulnerabilities open on factory networks for extended periods. Unpatched software remains one of the most common entry points attackers use in a cyber attack, since it does not require tricking an employee or breaking encryption, only finding a system that has not been updated.
Governance Is the Weakest Link
The most striking numbers in the report concern leadership and preparation rather than technology. Just 45 percent of manufacturers said a senior leader is formally responsible for cybersecurity, and only 51 percent have an internal process for responding to and recovering from an incident once it occurs.
| Cybersecurity Governance and Incident Preparedness | Share of Manufacturers |
|---|---|
| Internal incident response or recovery processes | 51 percent |
| Senior leader responsible for cybersecurity | 45 percent |
| Cybersecurity roles defined in policy | 42 percent |
| Cybersecurity discussed at board or risk meetings | 39 percent |
| Dedicated chief information security officer (CISO) | 23 percent |
| None of the above | 3 percent |
Make UK’s data indicates that without a named owner and a rehearsed response plan, a manufacturer hit by a cyber attack is likely to lose precious time figuring out who is in charge before anyone can begin containing the damage.
Why Supply Chains Are Now the Front Line
A single cyber attack rarely stays contained to one company anymore, and the report underscores just how far the damage can travel. When a supplier is compromised, the ripple effects hit everyone downstream. Among manufacturers affected by an incident, 31 percent reported delays to customer deliveries, another 31 percent saw reduced production capacity, and 23 percent faced shortages of components or raw materials because a partner’s systems went down.
That interconnected risk is starting to reshape how manufacturers do business with one another. According to the report, a quarter of manufacturers said customers are now demanding proof of cybersecurity compliance before agreeing to contracts, and 23 percent said they themselves are asking suppliers for cybersecurity assurances before working with them.
“This demonstrates a growing awareness of third-party cyber risk and highlights how responsibility for cyber resilience is becoming embedded across supply chains,” Make UK said in the report. The organization added that while the majority of manufacturers, 71 percent, have not yet introduced formal supplier cybersecurity requirements, the trend line points toward security becoming a shared obligation across the entire manufacturing chain rather than a problem each company handles on its own.
The Real Cost of an Incident
Industry estimates cited in the report suggest that a significant cyber attack on a UK manufacturer can cost more than 250,000 pounds, or roughly 337,600 dollars, once major data breaches are factored in. Make UK’s own analysis was more conservative, putting the average direct financial impact of an incident at around 28,000 pounds, or about 37,800 dollars, driven mainly by higher operating costs and lost production time.
| Wider Business Impacts of Cyber Incidents | Share Reporting Impact |
|---|---|
| Increased operational costs | 46 percent |
| Production downtime | 46 percent |
| Disruption to supply chain | 15 percent |
| Data loss or breach | 15 percent |
| Ransom demand | 15 percent |
| Lost output or reduced capacity | 8 percent |
| Delays to customer orders | 8 percent |
Production downtime and rising operational costs stand out as the most common consequences, each affecting nearly half of manufacturers hit by an incident. Ransom demands, while less frequent, still touched 15 percent of affected businesses, a reminder that ransomware remains an active threat to UK industry.
Why Manufacturers Are Struggling to Close the Gap
Make UK’s report points to practical, everyday barriers rather than a lack of concern. “While manufacturers increasingly recognize the importance of cybersecurity, many still face practical barriers to improving their cyber resilience,” the report noted, adding that these obstacles limit how many businesses adopt the products, services, standards, and insurance needed to reduce their exposure to a cyber attack.
| Barriers to Improving Cyber Resilience | Share of Manufacturers |
|---|---|
| Unaware of available products | 32 percent |
| Cost too high | 32 percent |
| Not seen as relevant to the business | 23 percent |
| Providers lack understanding of manufacturing | 18 percent |
| Too complex to implement | 9 percent |
| Other | 5 percent |
Cost and awareness tie as the two biggest obstacles, each cited by nearly a third of respondents. Notably, almost a quarter of manufacturers still do not see cybersecurity as relevant to their operations, a mindset that experts warn leaves smaller and mid-sized factories especially vulnerable, since attackers increasingly view less-defended suppliers as an easier way to reach larger targets further up the chain.
Digitalization Adds New Risk Alongside New Opportunity
The report also highlights a paradox facing modern factories. As manufacturers adopt automation, connected sensors, and artificial intelligence to boost productivity and stay competitive, those same technologies widen the potential attack surface for a cyber attack. More connected devices generally mean more potential entry points for attackers.
“The challenge therefore is not choosing between digitalization and security but ensuring that cyber resilience is built into digital adoption programs from the outset,” Make UK said, framing security not as a brake on innovation but as a necessary companion to it.
What Comes Next
Make UK’s findings are likely to feed directly into ongoing policy conversations about industrial cybersecurity standards and supply chain accountability in the UK, particularly as government agencies continue to push manufacturers toward baseline security certifications. With customer demands for compliance rising and the financial cost of a cyber attack well documented, industry watchers expect governance and incident response planning, not just firewalls and antivirus software, to become the next major battleground for manufacturers trying to protect their operations.
