Codes and Standards

Construction industry is the top target for cyberattacks

Dec. 9, 2021

Construction is the industry hit most often by ransomware cyber attackers, according to an analysis of 1,200 companies in 35 different industries by NordLocker, an encryption software firm based in the U.K. and the Netherlands.

Ransomware attacks in construction have struck large businesses including an Asia-based group of construction engineering companies, and small ones including a family-owned roofing company in Texas, the report says. Although large companies that generate more revenue attract hackers, small companies are appealing to hackers as well because they usually do not have the more robust cybersecurity protocols in place at larger businesses.

Cyber criminals most commonly attack construction companies through email communications, malware, and ransomware. They’ve also seized upon a new means of attack: “siegeware” that targets smart building technology. Another new potential area of vulnerability are job site drones and robotic devices.

It’s critical for construction firms to conduct periodic cybersecurity training with all employees to prevent cyberattacks, experts say.

Sign up for Building Design+Construction Newsletters