Sixty Eight Percent of Manufacturing Companies Hit by Ransomware Had Their Data Encrypted: Sophos Survey
#Sophos #CyberSecurity #Survey #Ransomware #EncryptedData“Using backups as a primary recovery mechanism is encouraging, since the use of backups promotes a faster recovery. While ransom payments cannot always be avoided, we know from our survey response data that paying a ransom doubles the costs of recovery.” - John Shier, Field CTO, Sophos
July 2023 : Sophos, a global leader in innovating and delivering cybersecurity as a service, has recently announced a new sectoral survey report, “The State of Ransomware in Manufacturing and Production 2023.” The report found that in more than two-thirds (68 percent) of ransomware attacks against this sector, the adversaries successfully encrypted data. This is the highest reported encryption rate for the sector over the past three years and is in line with a broader cross-sector trend of attackers more frequently succeeding in encrypting data.
However, in contrast to other sectors, the percentage of manufacturing organizations that used backups to recover data has increased, with 73 percent of the manufacturing organizations surveyed using backups this year versus 58 percent in the previous year. Despite this increase, the sector still has one of the lowest data recovery rates.
“Using backups as a primary recovery mechanism is encouraging, since the use of backups promotes a faster recovery. While ransom payments cannot always be avoided, we know from our survey response data that paying a ransom doubles the costs of recovery,” said John Shier, Field CTO, Sophos. “With 77 percent of manufacturing organizations reporting lost revenue after a ransomware attack, this added cost burden should be avoided, and priority placed on earlier detection and response.”
In addition, despite the growing use of backups, manufacturing and production reported longer recovery times this year. In 2022, 67 percent of manufacturing organizations recovered within a week, while 33 percent recovered in more than a week. This past year, only 55 percent of manufacturing organizations surveyed recovered within a week.
“Longer recovery times in manufacturing are a concerning development. As we have seen in Sophos' Active Adversary reports, based on incident response cases, the manufacturing sector is consistently at the top of organizations needing assistance recovering from attacks. This extended recovery is negatively impacting IT teams, where 69 percent report that addressing security incidents is consuming too much time and 66 percent are unable to work on other projects.”
Sophos provides a look at a large-scale ransomware attack against a manufacturing company in its newly released three-part “Think You Know Ransomware?” documentary series. In episode 2, Sophos interviews the chief information security officer of Norsk Hydro, a major aluminium production company, to learn about the aftermath and investigation of the attack against the company.
Sophos experts recommend the following best practices for organizations in manufacturing and across all other sectors. They suggest the following measures for strengthening the defensive shields:
⮚ Security tools that defend against the most common attack vectors, including endpoint protection with strong anti-exploit capabilities to prevent exploitation of vulnerabilities, and Zero Trust Network Access (ZTNA) to thwart the abuse of compromised credentials,
⮚ Adaptive technologies that respond automatically to attacks, disrupting adversaries and buying defenders time to respond,
⮚ 24/7 threat detection, investigation and response, whether delivered in-house or by a specialist Managed Detection and Response (MDR) provider,
⮚ Optimize attack preparation, including making regular backups, practicing recovering data from backups and maintaining an up-to-date incident response plan,
⮚ Maintain good security hygiene, including timely patching and regularly reviewing security tool configurations.
To learn more about the State of Ransomware in Manufacturing and Production, download the full report from Sophos.com.
NEWSLETTER
TRENDING ON PRO MFG
MORE FROM THE SECTION
