Jaguar Land Rover Cyberattack Forces Shutdown

Published 16 September 2025
Jaguar Land Rover (JLR), the UK’s largest carmaker, is facing one of its most serious cyber incidents yet—a large-scale cyberattack that has crippled vehicle production and disrupted its global network of factories, suppliers, and dealerships. As forensic investigations and recovery efforts continue, JLR has issued a clear statement to provide direction and reassurance to colleagues, partners, and customers.
What Happened?
JLR was forced to shut down its computer systems at the end of August after discovering unauthorised access, aiming to protect critical business and customer data. The shutdown affected all production lines in Solihull, Halewood, and Wolverhampton, leaving thousands of staff and suppliers in limbo as no new vehicles have been manufactured since the incident began.
The Ongoing Impact
-
Dealerships and service centres have struggled to complete repairs and fulfil orders due to ongoing supply chain and IT issues.
-
Smaller suppliers face potential bankruptcy as prolonged disruption threatens cash flow, leading to urgent calls for government support and potential furlough schemes.
-
JLR has confirmed that “some data” may have been accessed in the hack but has committed to contacting anyone affected if their information is found to be compromised.
Industry Response and Next Steps
With the cyberattack now entering its third week, the industry and government are closely monitoring developments while supporting the recovery. JLR’s experience is highlighting the vulnerabilities of modern vehicle manufacturing and supply chains in an era of rising digital risk. The company is working with national cybersecurity experts, law enforcement, and regulators as it plans a phased return to production.
Official Statement from JLR (16 September 2025)
“Today (Tuesday 16th September) we have informed colleagues, suppliers and partners that we have extended the current pause in our production until Wednesday 24 September. We have taken this decision as our forensic investigation of the cyber incident continues, and as we consider the different stages of the controlled restart of our global operations, which will take time. We are very sorry for the continued disruption this incident is causing and we will continue to update as the investigation progresses.”
Back to all help and advice articles