+44 (0) 203 189 1422

Cyber Insights: Jaguar Land Rover Attack

Concise Cybersecurity Intelligence for Decision-Makers

JLR Summary Image New

Download Our Cyber Insights Document on the Jaguar Land Rover Cyber Attack

In early September 2025, Jaguar Land Rover suffered a major cyber-incident that led to a global shutdown of its IT systems and manufacturing operations. The company confirmed it had detected unauthorised access and immediately shut down critical systems to contain the incident. Production at its UK plants was halted for weeks, with the pause extended into October and ripple effects felt across its supply-chain network. 

Our CMA Insights Document on the JLR attack provides a clear, structured breakdown of what happened—how the incident unfolded, why the operational impact was so severe, and what steps organisations across industries can take to bolster resilience. 

For any business operating in connected, digital environments—especially those with mission-critical manufacturing, logistics or supply-chain dependencies—the JLR incident serves as a wake-up call: preparedness isn’t optional.

If you’re looking to understand the full implications of the JLR attack, and to translate those insights into actionable improvements for your own incident-response and resilience programmes, download this useful, brief resource now. 

 

Disclaimer: This document has been created with the sole purpose of encouraging discourse on the subject of cybersecurity and good security practices. Our intention is not to defame any company, person or legal entity. Every piece of information mentioned herein is based on reports and data freely available online. Cyber Management Alliance neither takes credit nor any responsibility for the accuracy of any source or information shared herein.

  • ** GDPR ** We wholeheartedly believe your and our rights to privacy and in the GDPR. The bottom of the page explains how we use your data. 
  • Align with the GDPR requirements.
  • Increase your Breach Readiness.
  • Reduce your time to detect and respond.

Complete the form below to receive a copy of CMA Cyber Insights on the Jaguar Land Rover cyber attack

cyber-essentials-certification
NCSC Certified Training B&W 300px
CSC

FAQs on the Jaguar Land Rover Attack

  • 1. What happened in the Jaguar Land Rover cyber attack?
    Jaguar Land Rover experienced a major cyber incident in early September 2025. After detecting the incident, JLR proactively shut down systems across its global technology environment to contain the threat and begin a controlled investigation and recovery process.
  • 2. When did the Jaguar Land Rover cyber attack occur?
    JLR publicly confirmed the incident on 2 September 2025. The disruption continued throughout September, with sections of its digital environment gradually restored before manufacturing operations began a phased restart in early October.
  • 3. How did the cyber attack affect JLR’s manufacturing operations?
    The incident severely disrupted JLR’s retail and production activities, forcing the company to pause manufacturing at several facilities. Systems supporting vehicle production, logistics, invoicing, supplier payments, parts distribution and vehicle registrations were also affected.
  • 4. Was any data compromised in the JLR cyber attack?
    JLR initially stated that there was no evidence of customer data being stolen. However, the company later confirmed that some data had been affected and that relevant regulators were being informed. It said that individuals would be contacted if its investigation found that their information had been impacted.
  • 5. How did the JLR cyber attack affect its supply chain?
    The manufacturing shutdown disrupted suppliers that depend on JLR’s production schedules, orders and payment systems. The impact was particularly serious for smaller automotive suppliers with limited cash reserves, prompting JLR and the UK Government to introduce measures supporting supply-chain liquidity and continuity.
  • 6. How did Jaguar Land Rover respond to the cyber incident?
    JLR shut down affected systems, engaged cybersecurity specialists and worked with the NCSC, law enforcement and the UK Government. It then restored critical digital services and manufacturing operations in controlled phases to reduce the risk of further compromise.
  • 7. What can businesses learn from the Jaguar Land Rover cyber attack?
    The incident demonstrates how a cyber attack can rapidly become an operational and supply-chain crisis. Organisations should maintain segmented systems, tested recovery plans, secure offline backups, alternative manual procedures and rehearsed incident response arrangements involving executives, operational teams and critical suppliers.
  • 8. What does the CMA Cyber Insights document cover?
    The CMA Cyber Insights document provides a structured examination of the JLR attack, including its timeline, operational disruption, manufacturing shutdown and supply-chain consequences. It also identifies practical lessons for strengthening incident response, business continuity and organisational cyber resilience.

We are industry experienced practitioners when it comes to cyber security training & cyber security consultancy services

1487652208_graduationcap

Training

We offer a host of courses including our NCSC Assured Training in Cyber Incident Planning and Response and our NCSC Assured Training in Building and Optimising Incident Response Playbooks.

1487652701_like

Virtual CISO Services

Hands On, full-support 'Security As a Service', specifically designed for organisations that require access to experienced cybersecurity, governance, risk and compliance professionals.

1487652784_calendar-3

Virtual Cyber Assistant

A unique, affordable, subscription-based, cybersecurity service for small to medium businesses, offering 280+ services in cybersecurity.

1487652846_microphone

Cyber Crisis Tabletop Exercises

Scenario-based, verbally-simulated tabletop attack exercises that test your organisation's ability to effectively respond to a cyber-attack.

1487652632_search

Ransomware Tabletop Exercise

Measure your organisation’s Ransomware Readiness with a unique blend of verbal and visual simulations and ransomware scenario walkthroughs.

1487652567_line-chart

Executive Cyber Awareness Sessions

Specially designed for executive management, CEOs and boards of directors, engaging them in a business context to help explain the threats and risks from cyber-attacks.

How we use your data:

  • The form above collects personal information so we may email you the requested Jaguar Land Rover Cyber Attack summary and pressing the "Get your free copy now"  button acts as informed consent for this processing purpose. Consequently we may be in touch to:

    • Update you when we release new cyber attack insights or host educational events in your country or region.
    • Keep you posted on free resources and documents related to major cyber incidents and their analysis. (For example, we create insightful mind maps and expert-led Insights with Cyber Leaders Video Interviews.)
    • Ping you a note about upcoming FREE educational webinars on cybersecurity best practices and incident response.
    • Inform you of any upcoming Cyber Incident Response training that could strengthen your organization's resilience.  
  • Using the information from this page we will NOT sell or market to you any of our consultancy or trusted advisory services.  
  • In its purest interpretation, this act of us communicating with you is direct marketing and is processed on the basis of our legitimate interest and your engaging in our services. All marketing communication will include an unsubscribe button or other method of ending communication.