JLR confirms some data compromised in cyberattack
By Josh White
Date: Wednesday 10 Sep 2025
(Sharecast News) - Jaguar Land Rover confirmed Wednesday that data was compromised in the cyberattack which forced it to shut down operations last week, with production at UK and overseas plants expected to remain suspended until at least Monday.
Britain's biggest carmaker said Wednesday that its forensic investigation, supported by external cybersecurity specialists, had determined that "some data has been affected" and that regulators had been notified.
The company said it would contact any individuals if their information was found to be impacted but has not specified what type of data was accessed.
The attack, first detected last Tuesday, led JLR to halt production and send workers home.
Factories in the Midlands, Merseyside and abroad remain closed, and suppliers have also been disrupted, with some unable to access systems used for sourcing spare parts or registering vehicles.
Retail sales and service operations, however, continue to function normally.
JLR apologised for the ongoing disruption and pledged to provide further updates as its investigation progresses.
It was also due to brief MPs representing constituencies with production facilities later this week.
The hacking group known as Scattered Spider had claimed responsibility for the incident, posting screenshots purporting to show JLR's internal IT systems.
The group was previously linked to cyberattacks on UK retailers including Marks & Spencer.
Four people were arrested earlier this year in related attacks.
The breach marked one of the most serious cyber incidents faced by the Tata-owned manufacturer in recent years, with analysts warning that the financial and operational costs could be significant if systems remained offline for weeks.
Reporting by Josh White for Sharecast.com.
Email this article to a friend
or share it with one of these popular networks:
You are here: news
10 Lower Thames St,
London EC3R 6EN