Estimated reading time: 4 minutes
Human Error Exposes Factory Floors –
A careless click. A weak password. A moment of distraction. These are now the top vulnerabilities in Europe’s manufacturing sector. KnowBe4, a cybersecurity company specializing in human risk reduction, has released a report that sheds light on the human vulnerabilities within Europe’s manufacturing sector. The report, Securing Manufacturing’s Digital Future, finds that social engineering is at the heart of many breaches. Human error remains a critical cybersecurity vulnerability.
Phishing and social manipulation accounted for 22% of breaches in 2024. Attackers are bypassing firewalls by exploiting people. Manufacturing employees, often untrained in digital threats, are the most vulnerable entry point into systems.
KnowBe4 tracked the impact of awareness training. Before training, 31.8% of users clicked phishing simulations. That number dropped to 3.6% after a year. This represents an 89% improvement, demonstrating the effectiveness of continuous training.
Ransomware Dominates Manufacturing Attacks
The report shows ransomware remains the most common attack method; nearly half of all breaches in 2024 involved ransomware. Groups like LockBit and PlayCrypt have made manufacturing a top target for their attacks.
Factories cannot afford downtime. A stalled production line costs millions. Disruptions ripple through suppliers and customers. Hackers know manufacturers will pay quickly to resume operations.
Get The Cyber Insurance News Upload Delivered
Every Sunday
Subscribe to our newsletter!
Legacy Tech Weakens Defenses
Many manufacturers rely on outdated systems. These lack modern security controls. They are often difficult to patch or replace. Connecting them to digital networks increases vulnerability.
Upgrading can be costly and disruptive. However, doing nothing gives cybercriminals a clear path. Once inside, attackers can steal sensitive data and disrupt production.
Factories Are Easy Phishing Targets
Social engineering attacks rely on deception. A fake email, spoofed login, or impersonated message is often enough to compromise security. Most breaches classified under other causes begin with phishing.
The human element fuels these intrusions. KnowBe4 reports that 60% of cyber incidents involve human error or manipulation.
Supply Chain Breaches Spread Fast
Manufacturing is deeply connected to global suppliers, logistics, and service providers. A phishing attack at one vendor can affect everyone in the chain.
The World Economic Forum and ENISA rank supply chain breaches among the top cybersecurity threats to the manufacturing sector.
High-Profile Attacks Across Europe
- In Germany, a battery maker and ThyssenKrupp suffered breaches.
- Dutch chipmaker Nexperia lost 1TB of sensitive data.
- Belgian brewer Duvel halted production after a ransomware attack.
- In Sweden and Finland, attacks caused shutdowns and data loss.
While a short list, the report notes these are not isolated events. As in other sectors, the trend is for increased cyberattacks.
Sector-Specific Risks
Auto manufacturing focuses on securing connected vehicles. Factory systems often remain unprotected.
Food and beverage companies claim they are unprepared for cyberattacks. Productivity is prioritized over cybersecurity.
Pharmaceuticals store valuable IP and clinical data. They face both outsider and insider threats.
Why Manufacturers Fall Behind
Cybersecurity investments remain low. Reasons include:
- Fear of interrupting production.
- High upgrade costs.
- Shortages of qualified security staff.
- Urgent operational goals that push security down the list.
These factors delay essential improvements.
One Minute Watch – UK Cyber Insurance 2024: AI Threats, Claims Surge & Ransomware Trends Explained
KnowBe4 Calls for Action
KnowBe4 advises manufacturers to take several steps:
- Filter out suspicious emails before they reach workers.
- Train employees to recognize and respond to threats.
- Simulate phishing campaigns to build habits.
- Restrict access and segment systems.
- Include security in every digital upgrade.
“Cyber resilience starts with people,” says Javvad Malik, KnowBe4’s lead security advocate. “Many breaches begin with small mistakes. We must empower workers to spot and stop threats before they spread.”
Cybersecurity Depends on Human Readiness
Cybercriminals do not always break in. Sometimes they are invited. One careless click can cause massive disruption.
As with many reports like it, the KnowBe4 findings should serve as a call to action. Manufacturing, as is the case in many other areas of the global economy, needs digital vigilance to match its digital transformation. Cybersecurity must become standard on the shop floor.