Skip to content

Jaguar Land Rover's Global Operations Shut Down by Cyberattack

JLR's production halt enters its third week, costing millions daily. Meanwhile, arrests in other ransomware cases raise questions about potential links.

In this image, we can see an advertisement contains robots and some text.
In this image, we can see an advertisement contains robots and some text.

Jaguar Land Rover's Global Operations Shut Down by Cyberattack

Four individuals residing in the UK have been apprehended in relation to ransomware attacks on Marks & Spencer and the Co-op earlier this year. Meanwhile, Jaguar Land Rover (JLR) grapples with the aftermath of a cyberattack, leading to temporary layoffs and an extended shutdown.

JLR's global operations have been shut down since early September due to a cyberattack. The incident has resulted in thousands of JLR employees and supply-chain workers being temporarily laid off. The company's internal data has been compromised, potentially exposing personal information, which could lead to fines under British privacy laws.

The University of Oxford's Lucas Kello has labelled this incident an 'economic security incident'. JLR has extended its shutdown until at least September 24 as it continues its forensic investigation and pauses production restart attempts. The disruption is estimated to cost JLR approximately £72 million ($98 million) in sales per day.

The introduction of the British government's Cyber Security and Resilience Bill (CSRB) has been delayed again. While the CSRB would not have directly impacted JLR, it would have affected Tata Consultancy Services (TCS), a managed service provider used by JLR. Ciaran Martin, professor at the University of Oxford, suggests that protecting service continuity should be prioritized over protecting trivial personal data.

The cyberattack on JLR has led to significant disruption and potential financial losses. The arrest of four individuals in connection with other ransomware attacks may be related, but investigations are ongoing. As JLR continues to investigate and recover from the attack, the impact on its operations and the potential for further changes in cybersecurity legislation remain uncertain.

Read also:

Latest