PLC Security: IT-OT Cyberattacks Now Force Full Factory Shutdowns
On this page
PLC Security: IT-OT Cyberattacks Now Force Full Factory Shutdowns
Industrial cyberattacks were once defined by what they stole: customer records, intellectual property, financial data. That era is ending. A new wave of IT-OT cyberattacks is moving laterally from corporate networks into operational technology, targeting the programmable logic controllers (PLCs) that physically command production lines, and the consequence is no longer a breach, but a full factory
Detail
The shift carries profound implications for manufacturers, integrators, and automation vendors alike. When a PLC is compromised, the risk is not lost data; it is lost output, damaged equipment, and worker safety.
The industrial control system has moved from collateral damage to primary target. Attackers now understand that the fastest way to extract a ransom, or inflict strategic harm, is not to steal data but to stop production at its source.
For years, industrial cybersecurity strategy assumed that office systems and factory floors were separate worlds. The corporate network handled email and enterprise resource planning; the plant ran on isolated controllers. Digitalisation has dismantled that assumption.
As manufacturers connect PLCs, HMIs, and SCADA systems to business networks for real-time data and remote diagnostics, they inadvertently build bridges that attackers can cross. The result is a new attack chain: compromise the IT layer, pivot into the OT environment, and disable the controllers that keep machines moving.
Internet-exposed industrial control system devices grew roughly 40% between 2024 and 2025, expanding the attack surface faster than most organisations can secure it.
The clearest warning arrived in September 2025, when a cyberattack on Jaguar Land Rover's IT systems triggered a five-week halt of manufacturing operations. Production stopped across its three main UK plants, Solihull, Wolverhampton, and Halewood, and rippled through global facilities in Slovakia, China, India, and Brazil.
The incident is estimated to have cost around £1.9 billion (US$2.5 billion), making it one of the most financially damaging cyber events in UK history. According to the Society of Motor Manufacturers and Traders, UK car output fell 27% in September to just over 51,000 vehicles, the worst September for the industry since 1952.
Sourcing help
Send the BOM for one quote covering active stock, EOL stock and cross-references.
Need a quote for this part?
Send us the part number or article link — we will confirm price, availability and lead time.
