CYBERSECURITYTRACKER
Permanent story citation

Cybercrims go beyond stealing data to attack physical building systems

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10583

As cited

Copy frozen at (site build).

ot ics

Cybercrims go beyond stealing data to attack physical building systems

Cybercriminals are increasingly targeting building automation systems and operational technology to cause physical damage and extort organizations, exploiting gaps in security controls and using artificial intelligence (AI) to compromise unfamiliar industrial systems. Recent incidents include French grocery store refrigeration systems being hacked to spoil food, a Canadian hospital's door access controls disrupted by ransomware, and Las Vegas casinos losing slot machine and room access functionality. Ransomware attacks against industrial organizations rose 87 percent in 2024 to over 1,100 incidents in the first half of 2026, with threat actors using these physical consequences as leverage for extortion demands.

Why it matters: Manufacturing, energy, healthcare, hospitality, and retail operators are exposed to operational disruption and financial extortion through less-monitored building and operational systems; practitioners should assess internet-connected physical infrastructure for vulnerabilities and implement network monitoring, as fewer than 10 percent of operational technology networks have adequate visibility today.

VendorsMicrosoftServiceNow
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary