2024 Threat Report on OT Cyberattacks

This Technical Report presents an analysis of cyberattacks with physical consequences in Operational Technology (OT) networks, focusing on incidents that occurred in 2023. The report documents 68 deliberate attacks that resulted in physical impacts, such as production outages and equipment damage, affecting over 500 sites. This marks a 19% increase from the previous year, highlighting a concerning trend of nearly doubling incidents annually since 2019. Ransomware is identified as the predominant threat, accounting for 80% of known attacks. The report also discusses the evolving regulatory landscape, which has led to increased disclosures of such incidents due to new financial regulations. Additionally, it addresses the emergence of complex attack methods, including GPS spoofing and supply chain attacks. The findings indicate a significant rise in the number of attacks and their associated costs, with the discrete manufacturing sector being the most affected. The report emphasizes the need for enhanced cybersecurity measures in response to these escalating threats.