Loading story…
Jaguar Land Rover (JLR) has extended its global production shutdown into October following a significant cyberattack, with losses estimated at £50-70 million per day. The disruption has halted all manufacturing since early September, impacting over 30,000 direct employees and up to 150,000 in the supply chain, with layoffs and reduced pay widespread. The attack, believed to involve the Scattered Lapsus$ Hunters group, has raised concerns about JLR's lack of finalized cyber insurance and the broader economic impact on the UK's industrial sector.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On September 24, UK officials publicly acknowledged there was a strong case for financial support for Jaguar Land Rover as the company dealt with the fallout from the cyberattack and prolonged shutdown.
By September 23, reports said Jaguar Land Rover had extended its production pause again, with operations expected to remain halted until at least the next week. Multiple sources described the extension as a worsening of the disruption caused by the cyberattack.
Jaguar Land Rover was hit by a cyberattack that forced the company to halt or disrupt production operations. The incident became the central cause of an extended manufacturing shutdown reported across multiple outlets.
6 references tracked. Mallory keeps watching after this page renders.
go.theregister.com
Open sourcezendata.security
Open sourcetechcrunch.com
Open sourcego.theregister.com
Open sourcetherecord.media
Open sourceinsurancebusinessmag.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Jaguar Land Rover (JLR) has extended its global production shutdown until at least September 24, following a cyberattack that began at the end of August. The incident has halted operations at multiple sites worldwide, severely impacting JLR's supply chain and leading to temporary layoffs among suppliers. The attack, claimed by the Scattered Lapsus$ Hunters group, has resulted in significant financial losses and data compromise.
Jun 29, 2026
Jaguar Land Rover (JLR) has suffered a major cyberattack, forcing a multi-week shutdown of its UK production lines. The incident has caused significant disruption to JLR and its extensive supply chain, with reports of layoffs and financial losses up to £50 million per week. The attack's impact is described as unprecedented in the UK automotive sector, with thousands of jobs at risk.
Jun 29, 2026Jaguar Land Rover has prolonged its production shutdown until at least September 24, 2025, after a cyberattack by the Scattered Lapsus$ Hunters group disrupted assembly lines worldwide. The incident is projected to cost the automaker over £3.5 billion in revenue if the halt continues through September, severely impacting suppliers and risking thousands of jobs. Calls for government intervention and economic support are mounting as the supply chain faces potential bankruptcies and layoffs.
Jun 29, 2026