Loading story…
Jaguar Land Rover (JLR) has extended its global production shutdown until at least September 24, following a cyberattack that began at the end of August. The incident has halted operations at multiple sites worldwide, severely impacting JLR's supply chain and leading to temporary layoffs among suppliers. The attack, claimed by the Scattered Lapsus$ Hunters group, has resulted in significant financial losses and data compromise.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
9 events from the most recent confirmed update back to the earliest known activity.
Jaguar Land Rover disclosed that its fiscal third-quarter sales fell following the cyberattack, providing a later and more specific measure of commercial impact beyond earlier reports of earnings damage. This marked an additional company-reported business consequence as the firm continued recovering from the disruption.
Jaguar Land Rover disclosed that the cyberattack had a major impact on its earnings, adding a new company-reported measure of financial damage beyond earlier factory shutdowns and external cost estimates. This marks a later business-impact update from the affected company itself.
BBC reported that Jaguar Land Rover produced no vehicles in September after a five-week shutdown of factories and IT systems, contributing to a 27% drop in overall UK car production to the lowest September level since 1952. The Cyber Monitoring Centre said the incident affected 5,000 businesses and estimated full recovery would not come until January 2026.
Experts said the Jaguar Land Rover hack had become the costliest cyberattack in UK history, marking a significant later assessment of the incident's financial impact. This represents an escalation in understanding of the attack's consequences beyond the earlier production shutdown and restart delay.
Jaguar Land Rover extended the closure of its UK factories until 1 October following the early-September cyberattack, indicating disruption would last about four weeks. The company said it was preparing a phased restart while continuing its investigation, as the outage affected production across its three British plants.
Unite said the Jaguar Land Rover cyberattack was affecting the wider supply chain, with some workers laid off or put on reduced or zero pay and told to apply for universal credit. The union urged the UK government to consider furlough-style support for affected workers as production remained halted.
Jaguar Land Rover said its cyberattack-related disruption had lasted more than two weeks and that factory production would not resume until at least 24 September. The company had shut down computer systems and halted production, apologizing for the continuing impact.
Initial story creation
As JLR continued its forensic investigation into the cyber incident, the company said some data may have been viewed or stolen by third parties. This introduced a potential data-breach element beyond the previously reported production disruption and factory shutdowns.
19 references tracked. Mallory keeps watching after this page renders.
cybersecuritydive.com
Open sourcemotortrader.com
Open sourcecybersecuritydive.com
Open sourcebbc.com
Open sourcetherecord.media
Open sourcereuters.com
Open sourcebleepingcomputer.com
Open sourcetheregister.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Jaguar Land Rover (JLR) has extended its global production shutdown into October following a significant cyberattack, with losses estimated at £50-70 million per day. The disruption has halted all manufacturing since early September, impacting over 30,000 direct employees and up to 150,000 in the supply chain, with layoffs and reduced pay widespread. The attack, believed to involve the Scattered Lapsus$ Hunters group, has raised concerns about JLR's lack of finalized cyber insurance and the broader economic impact on the UK's industrial sector.
Jun 29, 2026Jaguar Land Rover has prolonged its production shutdown until at least September 24, 2025, after a cyberattack by the Scattered Lapsus$ Hunters group disrupted assembly lines worldwide. The incident is projected to cost the automaker over £3.5 billion in revenue if the halt continues through September, severely impacting suppliers and risking thousands of jobs. Calls for government intervention and economic support are mounting as the supply chain faces potential bankruptcies and layoffs.
Jun 29, 2026Jaguar Land Rover (JLR) suffered a major cyberattack in early September 2025, forcing the shutdown of IT systems and halting production across multiple global sites. The attack, claimed by the 'Scattered Lapsus$ Hunters' group, resulted in significant operational disruption and the confirmed theft of some internal data. JLR is working with cybersecurity specialists and authorities to investigate and restore operations, while the full impact on data and business continuity is still being assessed.
Jun 29, 2026