2025 OT Cyber Threat Report on Physical Consequences

The 2025 OT Cyber Threat Report documents cyber attacks that resulted in physical consequences for operational technology (OT) organizations. It outlines a significant increase in the number of sites affected by such attacks, with a reported 146% rise from 412 sites in 2023 to 1,015 in 2024. The report highlights that nation-state attacks causing physical consequences tripled in 2024, with the transportation industry being the most impacted sector. The methodology section describes the criteria for including incidents in the report, emphasizing that only deliberate attacks resulting in tangible harm were considered. Additionally, the report discusses the implications of new SEC regulations on incident disclosures, suggesting that these may have influenced the reporting of cyber incidents. The report concludes with a summary of defensive developments in 2024, including new recommendations for secure remote access solutions and a shift in terminology regarding threat assessment in OT security.