Jaguar Land Rover Confirms Hackers Stole Data in Ongoing Cyberattack

Jaguar Land Rover (JLR) has confirmed that data was stolen during a major cyberattack that has crippled its global operations, bringing vehicle production to a standstill since early September.

The luxury carmaker, a subsidiary of India’s Tata Motors, is now working with cybersecurity specialists to investigate the breach and restore its systems.

The cyber incident, first disclosed on September 2, 2025, prompted JLR to shut down its IT systems as a precautionary measure, which severely disrupted its manufacturing and sales operations.

The shutdown has halted production at its key UK facilities in Solihull, Halewood, and Wolverhampton, stopping the assembly of approximately 1,000 vehicles per day. The disruption extends globally, affecting factories in Slovakia and India, as well as dealer sales, vehicle handovers, and the ordering of parts.

Initially, JLR stated there was no evidence that customer data had been compromised. However, in a statement released on September 10, the company revised its assessment, admitting that its ongoing investigation revealed “some data has been affected”.

While JLR has not specified whether the compromised data belongs to customers, employees, or the company itself, it has notified the UK’s Information Commissioner’s Office (ICO) and other relevant regulators.

A JLR spokesperson stated, “Since we became aware of the cyber incident, we have been working around the clock, alongside third-party cybersecurity specialists, to restart our global applications in a controlled and safe manner”.

The company has assured that its “forensic investigation continues at pace” and that it will contact anyone whose data is found to be impacted.

The attack has caused significant concern, with UK government officials reportedly worried about the economic fallout from the prolonged shutdown, which is expected to last for weeks.

A hacking group known as “Scattered Lus$,” previously linked to attacks on other UK retailers, has reportedly claimed responsibility for the breach.

JLR continues to manage the crisis, with the majority of its production workers being told not to return to work as the company assesses the situation daily. The carmaker has apologized for the ongoing disruption caused by the incident.

Find this Story Interesting! Follow us on Google News, LinkedIn, and X to Get More Instant Updates.