Construction industry faces surge in ransomware attacks, report shows

A new edition of the QBE Insurance Resilience Report, produced with Control Risks, warns that the construction sector is now the top target for ransomware worldwide. The study finds that in 2025 the sector, which includes building, construction and real‑estate, accounted for 20 % of all ransomware incidents globally, outpacing traditionally high‑risk areas such as IT, telecoms and manufacturing. Seventy‑nine percent of Control Risks’ digital‑risk experts consider ransomware the most likely threat to generate serious consequences for construction firms.

The report links this exposure to the rapid digitalisation of the industry – the spread of cloud platforms, AI tools, connected devices and Building Information Modelling – which expands the attack surface and blurs the line between IT and operational technology. Complex supply chains and tight project schedules mean that even limited disruptions can cascade into cost overruns and contractual disputes, making construction companies attractive targets for cyber‑criminals. Incidents have risen steadily since 2022, with a sharp acceleration in 2024‑2025, amid rising geopolitical tensions and increased attacks on critical infrastructure. European directives such as NIS2 are set to tighten cybersecurity requirements for Italian firms.