Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Browse News Feed Stats Watchlists Beta About Contact

Jaguar Land Rover (JLR) hit by cyberattack

Incident
First reported
Last updated
Happening score
H score 21
3 unique sources, 8 articles

Summary

Hide ▲

Jaguar Land Rover (JLR) said a September ransomware attack knocked out production for several weeks and caused £196m ($258m) in cyber-related costs, adding to £485m quarterly losses and a 24% YoY revenue drop. The incident was claimed by Scattered Lapsus$ Hunters, and later assessments said it had a £1.9bn UK economic impact and affected more than 5000 UK organizations. JLR has said production of all its luxury brands has resumed, but the event continued to weigh on operations, suppliers, and sales into late 2025.

Related Happenings

UK government cyber resilience funding and pledge

Public Sector Action
First: 22.04.2026 17:10 Last: 22.04.2026 17:10 Sources 1

About this happening: **UK government** announced **£90m ($120m)** in cybersecurity funding and a new **Cyber Resilience Pledge**, aiming to strengthen **national cyber resilience**. The initiative was...

Open Happening

2025 Automotive carmakers ransomware surge

Target Trend
First: 16.04.2026 11:35 Last: 16.04.2026 11:35 Sources 1

About this happening: In **2025**, ransomware became the **fastest-growing** and most disruptive threat to **automotive carmakers**, accounting for **44% of attacks** and **more than doubling** over th...

Open Happening

Rising cyber-incident impact across UK manufacturers

Target Trend
First: 01.04.2026 12:30 Last: 01.04.2026 12:30 Sources 1

About this happening: A survey found **UK manufacturing organizations** are facing broad cyber-incident harm, with **78%** reporting a serious incident and **95%** seeing direct business impact. The pa...

Open Happening

2025 Decline in physically impactful OT attacks

Target Trend
First: 26.03.2026 22:33 Last: 26.03.2026 22:33 Sources 1

About this happening: **Physically impactful OT attacks** fell to **57 in 2025**, reversing a **year-over-year decline** that matters for critical infrastructure defenders. The total was down from **76...

Open Happening

Ransomware victim payment rates fall to record low as claimed attacks rise

Target Trend
First: 26.02.2026 16:00 Last: 26.02.2026 16:00 Sources 1

About this happening: Ransomware victim payment rates fell to **28%** last year, a record low, even as claimed attacks rose **50% year over year**, signaling a widening gap between attack volume and re...

Open Happening

Timeline

  1. 05.01.2026 02:00 7 articles · 4mo ago

    Jaguar Land Rover reports sales slump after cyber-attack

    Victim Impact Update

    Jaguar Land Rover (JLR) remained in the aftermath of a major cyber-attack that disrupted operations from September to November 2025, with Tata Motors saying the incident significantly disrupted operations and forced production halts across all factories in September. The same financial disclosure said JLR's third-quarter 2025 retail sales fell 25.1% year on year to 79,600 vehicles, wholesale volumes dropped 43% year on year to 59,200 units, and output returned to normal by mid-November while global distribution delays continued to weigh on sales. The Cyber Monitoring Centre later characterized the cyber-attack as a systemic cyber event and estimated a UK financial impact of £1.9bn ($2.55bn) affecting over 5000 UK organizations.

    Show sources
    Open in new tab
  2. 29.09.2025 13:57 1 articles · 8mo ago

    UK government backs JLR with £1.5 billion loan guarantee

    Legal Policy Action Update

    The UK government announced a £1.5 billion ($2 billion) loan guarantee for Jaguar Land Rover (JLR) to support the carmaker and its supply chain after the recent cyberattack shut down production lines and severely disrupted internal systems. The backing uses an Export Development Guarantee from UK Export Finance and is meant to bolster JLR’s cash reserves so it can keep supporting suppliers affected by the shutdown.

    Show sources
    Open in new tab
  3. 03.09.2025 13:06 1 articles · 8mo ago

    Jaguar Land Rover confirms cyber incident after systems shutdown

    Initial Disclosure

    Jaguar Land Rover said a cyber incident forced it to disconnect systems, severely disrupting retail and manufacturing operations across its global applications. JLR said it was working to restart systems in a controlled manner and had seen no evidence that customer data was stolen, while UK manufacturing plants and dealer operations were impacted over the weekend.

    Show sources
    Open in new tab