Pierluigi Paganini
September 18, 2025
Jaguar Land Rover will extend its production halt into a third week, keeping operations suspended until at least September 24 after a recent cyberattack.
Jaguar Land Rover (JLR) is a British luxury vehicle manufacturer headquartered in Whitley, Coventry, UK. JLR combines two iconic brands, Jaguar and Land Rover. Since 2008, JLR has been owned by Tata Motors (India), which bought it from Ford. JLR sells vehicles in over 120 countries, with major markets in Europe, North America, and China.
In early September, Jaguar Land Rover shut down systems to mitigate a cyberattack that disrupted production and retail operations. The attack also impacted systems at the Solihull production plant.
UK dealers reported JLR disruptions blocking car registrations and parts supply.
The company initially said customer data was not compromised.
“JLR has been impacted by a cyber incident. We took immediate action to mitigate its impact by proactively shutting down our systems. We are now working at pace to restart our global applications in a controlled manner.” reads the statement published by the automaker. “At this stage there is no evidence any customer data has been stolen but our retail and production activities have been severely disrupt”
The automaker did not disclose technical details about the incident; however, the group “Scattered Lapsus$ Hunters,” behind recent UK retail cyberattacks, claimed responsibility for the JLR attack.
Last week, JLR confirmed that the cyberattack also led to a data breach without disclosing details about the type of information that has been compromised.
“As a result of our ongoing investigation, we now believe that some data has been affected and we are informing the relevant regulators.” reads a statement issued by the carmaker. “Our forensic investigation continues at pace and we will contact anyone as appropriate if we find that their data has been impacted.”
This week, the carmaker announced the halt in production will extend into its third week. Jaguar Land Rover said the delay stems from the controlled restart of its global operations, which requires additional time.
“Today we have informed colleagues, suppliers and partners that we have extended the current pause in our production until Wednesday 24th September 2025.” reads the announcement. “We have taken this decision as our forensic investigation of the cyber incident continues, and as we consider the different stages of the controlled restart of our global operations, which will take time.
We are very sorry for the continued disruption this incident is causing and we will continue to update as the investigation progresses.”
The BBC said Jaguar Land Rover’s shutdown costs at least £50M weekly in lost output, as it misses producing about 1,000 cars per week.
“Jaguar Land Rover (JLR) has told suppliers that production at its factories will not resume until 24 September at the earliest following a serious cyber attack, but industry sources have warned disruption could last into November.” states BBC.
“The shutdown is believed to be costing the company at least £50m a week in lost production. JLR would normally expect to build more than 1,000 cars a day.”
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, JLR)
