Jaguar Land Rover Cyber Attack: What Businesses Can Learn
Michael Tunstall
September 20, 2025
Jaguar Land Rover (JLR) has been forced to halt production at its factories following a serious cyber attack that paralysed its IT networks, with production not expected to restart until at least 24 September - and some reports warning disruption could stretch into November.
The incident, which began on 1 September, has already cost JLR an estimated £50m a week in lost production. The company normally builds more than 1,000 cars a day across its UK and international sites.
It’s not just JLR feeling the pain. Suppliers - many of them small and medium-sized businesses - are facing cash flow crises and even the threat of bankruptcy due to the stoppage. Unite the union has warned of potential redundancies, and MPs have raised concerns about lasting damage to the UK’s engineering base.
A group calling itself Scattered Lapsus$ Hunters has claimed responsibility. The same group has previously targeted big names such as Marks & Spencer and Co-op.
A Growing Trend
Unfortunately, JLR is just the latest in a long list of high-profile businesses hit by cyber attacks. Major retailers, manufacturers, and even critical infrastructure providers have been targeted this year, underlining that no organisation is immune.
What It Means for Your Business
While a global carmaker might seem far removed from your business, the lesson is the same:
Cyber attacks cause disruption far beyond IT - they stop production, impact supply chains, and damage reputations.
Data loss is real - JLR admitted some data may have been viewed or stolen by third parties.
Recovery is complex - restarting operations isn’t as simple as switching systems back on.
Protecting Your Business
Even smaller businesses are now in the crosshairs. To reduce risk and disruption, you should:
Use proactive threat detection and response (MDR) to stop attacks before they spread.
Ensure backups of Microsoft 365, files, and systems are in place and tested.
Train staff to recognise phishing and suspicious activity.
Achieve certifications like Cyber Essentials to demonstrate best practice.
Cyber criminals don’t discriminate based on size. If a company as big as Jaguar Land Rover can be brought to a standstill, SMEs can’t afford to assume they’re safe.
