Jaguar Land Rover Extends Production Halt Following Cyber-Attack

Published: 16 September ‘2025. The English Chronicle Desk

Jaguar Land Rover (JLR), Britain’s largest carmaker, has announced an extension of its production shutdown as it continues to respond to a cyber-attack that has disrupted operations across its global facilities. The company confirmed on Tuesday that production will remain suspended until at least Wednesday, 24 September, while forensic investigations into the breach are ongoing and a phased restart of operations is planned.

The company, owned by India’s Tata Group, first identified the cyber intrusion earlier this month. JLR said the attack has affected “some data,” although it has not disclosed the specifics of the breach or whether customer or supplier information has been compromised. The manufacturer pledged to inform any individuals impacted by the incident.\

The cyber-attack has had a significant impact on the company’s production facilities in the Midlands and Merseyside, as well as other international sites, delaying the return to normal operations. The shutdown has also affected suppliers and retailers, many of whom rely on JLR’s computer systems for sourcing spare parts, managing inventories, and registering vehicles. The disruption is expected to continue into October, creating uncertainty for thousands of production workers and staff within the supply chain.

Unite, the trade union representing automotive workers, warned that many employees in JLR’s supply network face the risk of losing their livelihoods and urged the government to implement a furlough scheme to support those affected. Industry reports suggest that the company is losing around 1,000 vehicles per day in production, translating to an estimated £72 million in daily sales losses.

Responsibility for the attack has reportedly been claimed by a group of hackers linked to previous high-profile breaches of UK retailers, including Marks & Spencer. Screenshots of JLR’s internal IT systems allegedly posted on a Telegram channel have been attributed to a coalition of hacker groups known as Scattered Spider, Lapsus$, and ShinyHunters.

The cyber disruption comes at a challenging time for Jaguar Land Rover, which has been grappling with declining sales and the financial impact of US tariffs. The company reported a 49% drop in underlying pre-tax profits to £351 million in the three months to June, a period that included temporary suspension of exports to the US.

JLR has also faced scrutiny over its recent rebranding of the Jaguar marque, while its new electric vehicle models are not expected to launch until next year, adding further pressure on the company to stabilise operations. In a statement, the carmaker expressed regret for the continued disruption and emphasised its commitment to providing updates as the investigation progresses.

As Jaguar Land Rover works to restore production and assess the full extent of the cyber-attack, the incident highlights the growing vulnerability of major industrial operations to digital threats and underscores the economic risks such disruptions pose to the UK automotive sector.