1 in 5 Data Center Assets Are Within Easy Reach of Attackers

Claroty's analysis of over 750,000 data center assets found that roughly 18% of cyber-physical systems — including HVAC units and power distribution units — are just one network hop away from internet-exposed pathways. These systems rely on insecure legacy protocols, carry known unpatched vulnerabilities, and often use weak or default authentication credentials, making them attractive targets for attackers. Compromising these systems doesn't just mean a data breach — it can result in physical disruption to critical infrastructure, including power failures or environmental damage. This finding highlights a systemic failure to apply IT security principles to operational technology (OT) and cyber-physical environments. The convergence of IT and OT networks without adequate segmentation dramatically expands the attack surface.