A production halt is a stop in manufacturing or operational output, whether caused by equipment failure, safety controls, maintenance, or a cyber incident. In cyber security, it matters because downtime is often the clearest business impact of a compromise: even if attackers only reach IT systems, they can disrupt scheduling, control interfaces, inventory, or plant-floor dependencies that keep production moving.
In real attacks, a production halt may follow ransomware encryption, loss of authentication services, unsafe command blocking, or shutdowns made to contain an intrusion. Defenders treat it as a high-severity outcome because it affects revenue, supply chains, and safety. Reducing the risk requires segmentation between IT and OT, reliable backups, tested recovery procedures, alternate manual workflows, and monitoring that can detect when a cyber event is beginning to affect operational systems.


