Nearly a third of UK manufacturers hit by cyber-attacks, survey finds

Key points

• Nearly one in three British manufacturers (30%) reported a cyber-attack on their business or a company in their supply chain in the past year.
• Only half of those affected companies had a formal incident-response plan, a written playbook for what to do when an attack happens.
• The findings arrive almost a year after JLR (Jaguar Land Rover), Britain's largest automotive employer, was forced to halt production for weeks following a cyber-attack.
• Large manufacturers describe being under constant threat, yet preparedness still lags well behind the level of risk.

British factories are under mounting pressure from hackers, and the numbers show many aren't ready for it. A new survey finds that almost one third of UK manufacturers experienced a cyber-attack against their own systems or against a company in their supply chain, the network of suppliers that feed parts and services into a finished product.

That supply-chain angle matters. A manufacturer can invest heavily in its own security, then still get hurt because a smaller supplier with weaker defences gets compromised first. Hackers have learned that smaller companies are often an easier door into bigger ones.

Why does this affect ordinary people?

When a factory goes down, goods stop moving. Delivery times stretch and prices can rise. The JLR attack forced one of Britain's biggest employers to suspend production for weeks, showing how quickly a single breach can reach customers. When we covered the UK government's decision to update its national crisis plans on 20 July 2026 in "Britain Is Rewriting Its Emergency Playbook, and AI Crime Is Part of the Reason", AI-powered cyber threats to industry were already driving that rethink.

Half of surveyed companies admitted they have no incident-response plan. That's the equivalent of a shop owner who knows flooding is likely but has never once thought about where the mop is.

What should businesses do right now?

Security professionals consistently recommend the same starting points: map every supplier you depend on and ask them directly what security measures they run. Writing down what your team will do in the first hours after an attack is discovered costs nothing and changes everything.

Training staff to recognise phishing emails, fake messages designed to steal passwords or trick employees into handing over access, remains one of the most cost-effective defences a smaller firm can take.

Manufacturers that haven't reviewed their exposure since the JLR incident are working from an outdated picture of their own risk.

What happens next?

The UK government has signalled tighter cyber-security requirements for critical industries, including manufacturing, as part of broader national resilience efforts. Specific rules and timelines are still being shaped, but the direction is clear: regulators want documented plans, not good intentions.

The practical gap between the scale of the threat and how prepared companies actually are remains wide. That gap, not the 30% headline figure, is what should concern industry leaders most.

Common questions

Does this only affect large factories?

No. Supply-chain attacks specifically target smaller suppliers because they're easier to breach, then use them as a stepping stone into larger companies. Any business that sells parts or services to a bigger manufacturer is a potential target.

What is an incident-response plan and do I need one?

It's a short written document that says who calls whom, what systems to shut down first, and how to notify customers if your business is hit. Any company that stores customer data or runs networked machinery benefits from having one, even a basic two-page version.