Skip to content
Surge in Ransomware Attacks Targeting Manufacturing Sector in 2026

Surge in Ransomware Attacks Targeting Manufacturing Sector in 2026

First seen 17 Sep 2026, 16:29 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 18, 2026 at 15:58 UTC
  • •Ransomware attacks on manufacturers rose nearly 40% in early 2026 compared to 2025.
  • •The Jaguar Land Rover attack significantly disrupted production and affected over 5,000 organizations.
  • •The new ransomware group, The Gentlemen, accounted for 12% of attacks in 2026.

In 2026, ransomware attacks on the manufacturing sector surged nearly 40% year over year, with significant incidents including the Jaguar Land Rover attack that halted production for over five weeks. The Bank of England reported that this attack contributed to a 27% decline in UK car production in September 2025, affecting over 5,000 organizations. Black Kite's report identified 5,237 disclosed ransomware victims from January 2023 to July 2026, with the mid-market manufacturers being the primary targets. The new ransomware group, The Gentlemen, was responsible for 12% of the attacks in 2026. The report also highlighted that 70% of manufacturers had critical vulnerabilities, with many exposed credentials found on the dark web. The geographic footprint of attacks is expanding, particularly in Europe, where victim counts increased by 85% compared to the previous year. This trend underscores the ongoing risk to supply chains and the operational impact of ransomware incidents.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 52d ago How this analysis works

Timeline

2025-08-31
Jaguar Land Rover shuts down IT systems
JLR halted production at UK plants for over five weeks due to a cyberattack, impacting 1,000 vehicles daily.
blackkite.com
2025-09-01
Bank of England cites cyberattack impact
The Bank of England noted the JLR attack as a reason for lower third-quarter growth forecasts.
blackkite.com
2026-01-01
Black Kite reports 5,237 ransomware victims
From January 2023 to July 2026, Black Kite identified 5,237 disclosed ransomware victims in manufacturing and distribution.
blackkite.com
2026-09-17
Black Kite releases 2026 Manufacturing & Distribution Ransomware Report
The report highlights a 40% increase in ransomware attacks on manufacturers in the first half of 2026.
Prnewswire
2026-09-17
The Gentlemen group identified
The new ransomware group, The Gentlemen, was first noted by Black Kite in September 2025, responsible for 12% of attacks in 2026.
Feeds.Feedburner

More articles in this cluster (18)

Following this threat?

Track The Gentlemen and Bank Of England in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed