30% of UK Manufacturers Report Cyber Incidents in Their Business or Supply Chain

Nearly one-third of UK manufacturers have experienced a cyber incident either directly or through their supply chain in the past year, as found in a Make UK survey. When incidents occur through suppliers, they can disrupt production, deliveries, and critical factory systems. Only half of the manufacturers have a response plan in place, highlighting the need for improved preparation. A compromised supplier can cause production interruptions even if the manufacturer itself was not the primary target.

The Cyber Security Breaches Survey conducted by the UK government revealed that 43% of all UK businesses faced a breach or attack in the previous year, but only 25% had a formal incident-response plan. These statistics encompass various sectors and do not specifically represent the manufacturing industry. A real-world example of a cyber incident's impact on production is seen in Jaguar Land Rover.

The company shut down global systems after discovering an attack in late August 2025 and resumed manufacturing by mid-November, incurring £196 million in cyber-related costs during the second fiscal quarter.

The UK’s Cyber Resilience Pledge emphasizes board-level responsibility and stronger supply-chain security. It mandates audits of Cyber Essentials coverage across supply chains and adopts a risk-based approach to supplier requirements. This includes mapping supplier access, testing escalation paths, and ensuring incident-response plans cover production recovery alongside data and system restoration.

Security teams must also verify the connection points between operational technology and enterprise networks, as well as the third parties that can access these environments. The ultimate question remains: Which supplier or system failure could halt production, and has the response plan been tested against such scenarios?