ICS Labs Outbreak Alert - Cyberattack Paralyzes Jaguar Land Rover and Disrupts Global Production

Jaguar Land Rover, UK's Largest Carmaker, Issues Alert on Massive Cyberattack

Jaguar Land Rover (JLR) has confirmed a cyberattack that has severely disrupted its global sales and production operations. The company released a statement informing that it has proactively shut down its IT systems as a containment measure and is working to gradually restore critical applications.

Impact

The attack has affected production at JLR's factories in Halewood, Solihull, and Wolverhampton. Systems were compromised, leading to a complete shutdown of operations and forcing thousands of employees to stay home. The disruption has extended to dozens of suppliers and other company operations in countries like Slovakia, Brazil, and India. Dealerships and garages have suffered from the inability to use digital systems, resorting to manual processes, while access to databases like the one for spare parts has been interrupted.

Response and Recovery Measures

The attack has been claimed by English-speaking hacker groups, including Scattered Spider, Lapsus$, and ShinyHunters. JLR has initiated a controlled response to the incident, working at an accelerated pace to safely restart its global systems. The company is collaborating with cybersecurity specialists and law enforcement agencies to investigate the intrusion. While there is no evidence of customer data theft, JLR has notified the Information Commissioner's Office (ICO) about the incident, alerting them to the potential risk of data infiltration.

Latest Updates

• September 1, 2025: Initial disruption of production and retail activities.

• September 7, 2025: Severe disruption confirmed; expectations are that operations may not normalize until October.