Black Kite: Manufacturing ransomware surged in 2026, spreading beyond the US, with 1,183 victims through July - Industrial Cyber

Black Kite’s 2026 Manufacturing & Distribution Ransomware Report says manufacturers are hit disproportionately, representing 22% of 7,551 publicly disclosed ransomware victims across all industries. Attacks against manufacturers more than doubled since 2023, rising 39.7% year over year during the first seven months of 2026 to 1,183 victims—already above the full-year 2024 total. The 44-page report also finds the shift toward mid-market firms, with companies earning $10 million to $100 million in annual revenue accounting for 70.2% of manufacturing victims; the median victim generated $42.9 million. Europe’s manufacturing ransomware incidents grew 85.4%, cutting the US share of victims from 52.3% to 34.8%, with Germany up more than 83% in the same period. Black Kite cites attackers’ ability to quickly disrupt production via exposed services, unpatched systems and leaked credentials.