Find notable cyber news and cases, enriched with sources, timelines, and signals.
Home Watchlists Beta Browse News Feed Stats About Contact

Jaguar Land Rover (JLR) hit by cyberattack

Incident
First reported
Last updated
Happening score
H score 65
3 unique sources, 10 articles

Summary

Hide ▲

Jaguar Land Rover (JLR) remains tied to a September 2025 cyberattack that disrupted operations for weeks and drove major financial fallout, including £196m ($258m) in cyber-related costs and a broader UK economic impact later estimated at £1.9bn ($2.5bn). A June 26 report linked Russian hackers to the incident, while Microsoft reportedly raised the alarm and experts described the event as destructive sabotage rather than a ransom-driven intrusion. Attribution has also been complicated by Scattered Lapsus$ Hunters claiming responsibility, and the report separately said Rey independently breached part of the JLR network.

Related Happenings

DoJ Disruption Week crypto fraud takedown

Law Enforcement
H score46 First: 04.06.2026 09:06 Last: 04.06.2026 09:06 Sources 1

About this happening: Authorities **arrested** seven scammers in Thailand and disrupted a **crypto fraud** network tied to **Disruption Week**, expanding pressure on transnational scam operations targe...

Open Happening

Microsoft civil action against Fox Tempest infrastructure takedown

Regulatory/Legal Action
H score24 First: 19.05.2026 18:00 Last: 19.05.2026 18:00 Sources 1

About this happening: Microsoft filed a **civil action** against **Fox Tempest** in the **US District Court for the Southern District of New York**, securing a **court order** that enabled a broad disr...

Open Happening

Tampa medical device company hit by ransomware attack linked to BlackCat (ALPHV)

Incident
H score45 First: 01.05.2026 10:47 Last: 01.05.2026 10:47 Sources 1

About this happening: A **Tampa medical device company** suffered a **ransomware intrusion** in **May 2023** that encrypted its servers and triggered a **$10 million** ransom demand. The company later...

Open Happening

UK government cyber resilience funding and pledge

Public Sector Action
H score25 First: 22.04.2026 17:10 Last: 22.04.2026 17:10 Sources 1

About this happening: **UK government** announced **£90m ($120m)** in cybersecurity funding and a new **Cyber Resilience Pledge**, aiming to strengthen **national cyber resilience**. The initiative was...

Open Happening

2025 Automotive carmakers ransomware surge

Trend
H score34 First: 16.04.2026 11:35 Last: 16.04.2026 11:35 Sources 1

About this happening: In **2025**, ransomware became the **fastest-growing** and most disruptive threat to **automotive carmakers**, accounting for **44% of attacks** and **more than doubling** over th...

Open Happening

Timeline

  1. 29.06.2026 12:15 1 articles · 10d ago

    Experts link Russia to Jaguar Land Rover breach

    Attribution Update

    A June 26 New York Times report linked Russian hackers to the Jaguar Land Rover breach, and Microsoft reportedly raised the alarm with JLR while security experts described the activity as Kremlin-backed destructive sabotage rather than a ransom-driven intrusion. Attribution was also complicated by Scattered Lapsus$ Hunters claiming responsibility, and the report separately claimed that Rey independently breached part of the JLR network.

    Show sources
    Open in new tab
  2. 09.06.2026 12:00 2 articles · 1mo ago

    JLR orders in-person password reset for 30,000 staff after cyber-attack

    Mitigation Patch Update

    After Jaguar Land Rover (JLR) was hit by a major cyber-attack in September 2025, the company required every member of staff to come on site and reset their passwords, and Ashish Shrestha said the team also reset multi-factor authentication (MFA) to validate employee identities before relying on Microsoft 365 for communications.

    Show sources
    Open in new tab
  3. 05.01.2026 02:00 7 articles · 6mo ago

    Jaguar Land Rover reports sales slump after cyber-attack

    Victim Impact Update

    Jaguar Land Rover (JLR) remained in the aftermath of a major cyber-attack that disrupted operations from September to November 2025, with Tata Motors saying the incident significantly disrupted operations and forced production halts across all factories in September. The same financial disclosure said JLR's third-quarter 2025 retail sales fell 25.1% year on year to 79,600 vehicles, wholesale volumes dropped 43% year on year to 59,200 units, and output returned to normal by mid-November while global distribution delays continued to weigh on sales. The Cyber Monitoring Centre later characterized the cyber-attack as a systemic cyber event and estimated a UK financial impact of £1.9bn ($2.55bn) affecting over 5000 UK organizations.

    Show sources
    Open in new tab
  4. 29.09.2025 13:57 1 articles · 9mo ago

    UK government backs JLR with £1.5 billion loan guarantee

    Legal Policy Action Update

    The UK government announced a £1.5 billion ($2 billion) loan guarantee for Jaguar Land Rover (JLR) to support the carmaker and its supply chain after the recent cyberattack shut down production lines and severely disrupted internal systems. The backing uses an Export Development Guarantee from UK Export Finance and is meant to bolster JLR’s cash reserves so it can keep supporting suppliers affected by the shutdown.

    Show sources
    Open in new tab
  5. 03.09.2025 13:06 1 articles · 10mo ago

    Jaguar Land Rover confirms cyber incident after systems shutdown

    Initial Disclosure

    Jaguar Land Rover said a cyber incident forced it to disconnect systems, severely disrupting retail and manufacturing operations across its global applications. JLR said it was working to restart systems in a controlled manner and had seen no evidence that customer data was stolen, while UK manufacturing plants and dealer operations were impacted over the weekend.

    Show sources
    Open in new tab