Modern global supply chains for critical minerals exhibit high degrees of digital and operational interdependence, resulting in systemic vulnerabilities to cyber threats. Attack campaigns targeting mining, refining, logistics, and trading nodes have produced measurable disruption, including direct production losses, shipment delays, and abrupt fluctuations in commodity prices. Distinct attacker groups, including state-sponsored actors, financially motivated ransomware collectives, and compromised vendors, account for both the frequency and sophistication of recent incidents. Analysis of real incident records demonstrates that ransomware and supply chain compromise constitute the primary attack vectors, with growing prevalence of operational technology breaches. The typical organizational response includes manual fallback operations, but these rarely eliminate downstream economic consequences. Incidents involving the compromise of key ports, transport nodes, or third-party suppliers have generated cascading effects, impacting markets and manufacturing lines across continents. Empirical quantification of these events reveals not only direct financial costs but also knock-on environmental impacts, with rerouted logistics and backup production lines leading to unplanned carbon emissions. Median recovery times remain on the order of days, and data show a consistent annual increase in verified cyber events within the sector. Attacks on upstream or midstream assets frequently propagate across the value network, exposing single points of failure and highlighting the need for active risk identification. The historical trend, based solely on publicly documented events, supports data-driven projections of heightened exposure and loss frequency through the end of the decade. Observed attack growth rates point to rising aggregate costs and more frequent market shocks, emphasizing the necessity for empirical, interdisciplinary attention to digital supply chain security. Gaps in incident disclosure and reporting completeness persist, underscoring a broader challenge for regulators and industries seeking to quantify and mitigate cyber-physical risks underpinning the clean energy transition.