Cyberattack Forces Jaguar Land Rover To Suspend Car Production until 24th September, Data Compromised

Moneylife Digital Team 16 September 2025

Economy & Nation

Jaguar Land Rover (JLR), Britain’s biggest car-maker and part of the Indian conglomerate Tata group, has been forced to halt production at all its factories worldwide for over two weeks after a major cyberattack crippled its information technology (IT) systems. These incidents underline how even global corporations can be brought to a standstill by sophisticated hacks.

The company confirmed on Tuesday that the production shutdown will continue until 24 September 2025 as forensic investigations proceed. Plants in Solihull, Halewood and Wolverhampton, which normally produce around 1,000 vehicles a day, have been at a standstill since the start of last week.

In a statement, JLR says it was still working with third-party specialists to restart its global applications 'in a controlled and safe manner'. The company also admitted that some data had been affected in the breach and regulators had been informed, though it has not clarified whether customers, suppliers, or employees were directly impacted.

The group claiming responsibility, 'Scattered Lapsus$ Hunters', has been linked to earlier cyberattacks on UK retailers, including Marks & Spencer. Cybersecurity experts warn that the JLR breach appears even more disruptive than the M&S hack, which cost the retailer 300mn (million) pounds and disabled online sales for six weeks.

The scale of disruption at JLR is severe with production lines down, thousands of workers sent home, and suppliers under strain. JLR has told the UK government that while it can absorb the financial impact, many smaller suppliers may not survive without emergency taxpayer support. With around 33,000 direct UK employees and over 100,000 supply-chain jobs tied to JLR, unions have already urged ministers to consider a furlough-style scheme to protect livelihoods.

Beyond financial losses, the attack highlights a wider risk for corporations. Former chief of the UK national cyber security centre, Ciaran Martin, told the BBC that the real threat is not just stolen data but paralysis of critical operations. “For a company like JLR, the issue is not someone photocopying records. It is the equivalent of being punched in the face and having your legs broken — your production lines stop,” he says.

The disruption comes at a sensitive time for JLR which is already under pressure from global trade tariffs and rising costs. Just two years ago, it signed an 800mn pound IT and cybersecurity contract with Tata Consultancy Services (TCS) to bolster resilience. Yet, the incident shows that even significant investments cannot fully insulate global manufacturers from cyber risks.

As JLR works 'around the clock' to restore its systems, industry analysts warn the fallout could hit supply chains and sales targets for months to come. For many observers, the incident is a stark reminder that cyberattacks are no longer just about data theft — they can grind entire industries to a halt.

Comments