Jaguar Land Rover cyberattack
The Jaguar Land Rover cyberattack is a 2025 cyberattack aimed at the British automotive manufacturer Jaguar Land Rover.[1][2][3] It is believed to be the most damaging cyberattack in British history, with an estimated eventual total damage to the British economy of £1.9 billion.[4][5]
Attack
The attack began on 31 August 2025.[1] Jaguar Land Rover paused production on 1 September 2025, and by 22 September it had caused production lines at Jaguar Land Rover to cease all production for three weeks, with staff told to stay at home.[2][6]
Initially, the production systems were to be restarted on 24 September, but on 23 September 2025, Jaguar Land Rover announced the pause on production would continue until 1 October.[2][3]
Impact
The Department for Business and Trade and Society of Motor Manufacturers and Traders issued a joint statement in which they said the attack had a significant effect on Jaguar Land Rover and the broader supply chain for car manufacturers.[7]
MP Liam Byrne described the attack as a "digital siege" that is seeing supply chain workers "laid off in their hundreds".[6] He also said that "We fear if the government doesn't step up soon, people will be laid off in their thousands."[6]
Unite has said that supply chain staff have been advised to apply for Universal Credit.[6][8]
Jamie MacColl, a researcher at Royal United Services Institute, said "It seems unprecedented in the UK to have that level of disruption because of a cyberattack or ransomware attack" and that thousands of jobs could be put at risk is "a different order of magnitude".[2]
Jaguar Land Rover has not revealed the impact on the company, but a criminal investigation has begun.[6]
Jaguar Land Rover said that they had delayed restarting production as a "forensic investigation" is in progress.[6] The cost to the company is estimated at £50 million per week.[6][2]
As of 22 October, JLR was slowly restarting parts of its production processes.[4]
On 7 November, the Bank of England said that the cyberattack was one reason for slower GDP growth, with weaker exports to the United States as the other.[9]
Attackers
Shortly after the attack, a group calling itself Scattered Lapsus$ Hunters on Telegram claimed responsibility for the attack.[2] This suggested collaboration between Scattered Spider, Lapsus$ and ShinyHunters, three English-speaking cybercrime groups.[2]
References
- ↑ 1.0 1.1 Vallance, Chris; Leggett, Theo (2 September 2025). "Jaguar Land Rover production severely hit by cyber-attack". BBC News. https://www.bbc.com/news/articles/c9wywvllq7wo.
- ↑ 2.0 2.1 2.2 2.3 2.4 2.5 2.6 Burgess, Matt (22 September 2025). "A Cyberattack on Jaguar Land Rover Is Causing a Supply Chain Disaster". Wired (magazine). https://www.wired.com/story/jlr-jaguar-land-rover-cyberattack-supply-chain-disaster/. Retrieved 23 September 2025.
- ↑ 3.0 3.1 Young, Sarah (23 September 2025). "Jaguar Land Rover cyberattack shutdown to hit four weeks". The Irish Times. https://www.irishtimes.com/business/2025/09/23/jaguar-land-rover-cyberattack-shutdown-to-hit-four-weeks/.
- ↑ 4.0 4.1 "JLR hack 'is costliest cyber attack in UK history', experts say" (in en-GB). 22 October 2025. https://www.bbc.co.uk/news/articles/cy9pdld4y81o.
- ↑ Pearson, James (22 October 2025). "Jaguar Land Rover hack cost UK economy an estimated $2.5 billion, report says". https://www.reuters.com/sustainability/boards-policy-regulation/jaguar-land-rover-hack-cost-uk-economy-25-billion-report-says-2025-10-22/.
- ↑ 6.0 6.1 6.2 6.3 6.4 6.5 6.6 Rack, Susie (17 September 2025). "JLR hack could see thousands laid off - MP". BBC News. https://www.bbc.com/news/articles/cwyrqxj3eqqo.
- ↑ "Joint statement on government-industry supplier meeting regarding Jaguar Land Rover cyber incident". 19 September 2025. https://www.gov.uk/government/news/joint-statement-on-government-industry-supplier-meeting-regarding-jaguar-land-rover-cyber-incident.
- ↑ Moreau, Emer (17 September 2025). "JLR supply chain staff told to apply for universal credit, union claims". BBC News. https://www.bbc.com/news/articles/c784nwvj1l3o.
- ↑ Jones, Connor (2025-11-07). "Bank of England says JLR's cyberattack contributed to UK's unexpectedly slower GDP growth". The Register. https://www.theregister.com/2025/11/07/bank_of_england_says_jlrs/.
 |  |
