Jaguar Land Rover Reports Data Breach Disrupting Operations

Jaguar Land Rover disclosed that a disruptive cyberattack resulted in the theft of an unspecified amount of data. The attack forced the automaker to halt vehicle assembly lines and severely disrupted its production and sales operations starting September 2, 2025. The incident also impaired supply chains and vehicle repair services.

The U.K.-based company confirmed that data theft occurred but has not specified whether the stolen information relates to the company, its employees, or customers. The breach came with a mandatory notification to the U.K. Information Commissioner's Office, as required by law.

What happened during the Jaguar Land Rover cyberattack

The company detected the cyberattack at the beginning of September and immediately shut down its IT systems to contain the damage. This precaution halted vehicle production in factories across the U.K. and other countries where Jaguar Land Rover operates, including Slovakia, China, and India. Staff were instructed to stay home during the disruption.

Did you know?
Jaguar Land Rover is one of the UK’s largest employers with over 33,000 staff across multiple countries.

How the data breach impacted vehicle production and supply chains

The shutdown led to a complete stoppage of vehicle assembly lines, affecting thousands of employees. Additionally, the breach disrupted the company’s supply chain, impairing parts procurement and vehicle repairs. Dealerships faced challenges in registering new cars and servicing vehicle maintenance requests.

Who might have been affected by the stolen data

It remains unclear whether the compromised data includes customer, employee, or internal company information. The lack of detailed disclosure leaves open questions about the scope and sensitivity of the breach and potential risks for data subjects related to the incident.

ALSO READ | What Happened in the Salesloft GitHub Account Breach Exposing Data

What the company and authorities are doing in response

Jaguar Land Rover is collaborating with cybersecurity experts and law enforcement agencies to investigate and mitigate the impact. The company is working around the clock to restore its IT infrastructure safely. The U.K. government has expressed concern about the economic fallout and is monitoring the situation closely.

How long the recovery from the attack is expected to take

Analysts and reports suggest the recovery will take weeks rather than days, given the severity of the operational disruption. The company is prioritizing secure restoration of systems to avoid further damages and to resume normal production flow safely.

Moving forward, Jaguar Land Rover’s focus will be on enhancing cybersecurity defenses to prevent future attacks. The incident highlights the growing risks that digital disruptions pose to the automotive industry’s complex manufacturing and supply networks.