Jaguar Land Rover cyberattack

The Jaguar Land Rover cyberattack is a 2025 cyberattack aimed at the British automotive manufacturer Jaguar Land Rover.[1][2][3] It is believed to be the most damaging cyberattack in British history, with an estimated eventual total damage to the British economy of £1.9 billion.[4][5]

Attack

The attack began on 31 August 2025.[1] Jaguar Land Rover paused production on 1 September 2025, and by 22 September it had caused production lines at Jaguar Land Rover to cease all production for three weeks, with staff told to stay at home.[2][6]

Initially, the production systems were to be restarted on 24 September, but on 23 September 2025, Jaguar Land Rover announced the pause on production would continue until 1 October.[2][3]

Impact

The Department for Business and Trade and Society of Motor Manufacturers and Traders issued a joint statement in which they said the attack had a significant effect on Jaguar Land Rover and the broader supply chain for car manufacturers.[7]

MP Liam Byrne described the attack as a "digital siege" that is seeing supply chain workers "laid off in their hundreds".[6] He also said that "We fear if the government doesn't step up soon, people will be laid off in their thousands."[6]

Unite has said that supply chain staff have been advised to apply for Universal Credit.[6][8]

Jamie MacColl, a researcher at Royal United Services Institute, said "It seems unprecedented in the UK to have that level of disruption because of a cyberattack or ransomware attack" and that thousands of jobs could be put at risk is "a different order of magnitude".[2]

Jaguar Land Rover has not revealed the impact on the company, but a criminal investigation has begun.[6]

Jaguar Land Rover said that they had delayed restarting production as a "forensic investigation" is in progress.[6] The cost to the company is estimated at £50 million per week.[6][2]

As of 22 October, JLR was slowly restarting parts of its production processes.[4]

On 7 November, the Bank of England said that the cyberattack was one reason for slower GDP growth, with weaker exports to the United States as the other.[9]

Attackers

Shortly after the attack, a group calling itself Scattered Lapsus$ Hunters on Telegram claimed responsibility for the attack.[2] This suggested collaboration between Scattered Spider, Lapsus$ and ShinyHunters, three English-speaking cybercrime groups.[2]

References

  1. ^ a b Vallance, Chris; Leggett, Theo (2 September 2025). "Jaguar Land Rover production severely hit by cyber-attack". BBC News. Retrieved 23 September 2025.
  2. ^ a b c d e f g Burgess, Matt (22 September 2025). "A Cyberattack on Jaguar Land Rover Is Causing a Supply Chain Disaster". Wired (magazine). Retrieved 23 September 2025.
  3. ^ a b Young, Sarah (23 September 2025). "Jaguar Land Rover cyberattack shutdown to hit four weeks". The Irish Times. Retrieved 23 September 2025.
  4. ^ a b "JLR hack 'is costliest cyber attack in UK history', experts say". BBC News. 22 October 2025. Retrieved 22 October 2025.
  5. ^ Pearson, James (22 October 2025). "Jaguar Land Rover hack cost UK economy an estimated $2.5 billion, report says". Reuters.
  6. ^ a b c d e f g Rack, Susie (17 September 2025). "JLR hack could see thousands laid off - MP". BBC News. Retrieved 23 September 2025.
  7. ^ "Joint statement on government-industry supplier meeting regarding Jaguar Land Rover cyber incident". gov.uk. 19 September 2025. Retrieved 23 September 2025.
  8. ^ Moreau, Emer (17 September 2025). "JLR supply chain staff told to apply for universal credit, union claims". BBC News. Retrieved 23 September 2025.
  9. ^ Jones, Connor (7 November 2025). "Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth". The Register. Retrieved 8 November 2025.