Jaguar Land Rover cyber attack leaves production halted as data breach confirmed

Jaguar Land Rover has acknowledged a significant cyber attack that has paralysed its production facilities both in the UK and overseas. The company has disclosed that a data breach occurred during the incident, with indications that sensitive information may have been compromised. JLR notified regulators as soon as it became apparent that “some data has been affected” and is continuing a forensic investigation into the nature and extent of the breach. Although the precise data at risk has not been detailed, the affected information raises concerns about possible ransom demands or the threat of corporate data being encrypted for leverage.

The disruption began more than a week ago and has had a notable impact on manufacturing, sales, and repairs. Staff at JLR have been receiving daily updates but many have now been told they will not be returning to work before Monday at the earliest. Production at multiple sites remains halted, contributing to operational and financial uncertainty for the automotive giant. The cyber incident has similarly impacted the delivery of vehicles and the servicing of existing customers, exacerbating the company’s challenges.

The hacking group Scattered Spider, which has links to another collective known as Shiny Hunters, has claimed responsibility for the breach. Sources suggest the group exploited a vulnerability in SAP software, developed by a German company, to gain access to JLR’s internal systems. Scattered Spider is also connected to high-profile attacks on other British retailers earlier this year. Rapid response measures included the shutdown of critical systems once the breach was discovered and the immediate involvement of third-party cybersecurity specialists to manage the situation and restore operations safely.

JLR officials expressed regret at the ongoing disruption and reiterated their commitment to transparency, assuring affected parties that they will be notified should their data be found to be compromised. As the investigation progresses, the company continues to work closely with experts and regulatory authorities to regain control of its systems and mitigate further risks. This incident underlines the growing threat of cyber attacks within the automotive sector and the strong necessity for robust cybersecurity protocols.