www.autoexpress.co.uk Jaguar Land Rover Faces Costliest Cyber Attack in British History
Article Content
- •JLR's ransomware attack is the costliest in British history, estimated at £1.9 billion.
- •Production was halted for five weeks, causing losses of £50 million per week.
- •The attack involved multiple hacker groups, disrupting operations for JLR and its supply chain.
Jaguar Land Rover (JLR) suffered a ransomware attack on August 31, 2026, leading to a shutdown of production for five weeks. The Cyber Monitoring Centre estimates the financial impact to be between £1.6 and £2.1 billion, with £1.9 billion as the most likely figure. The attack was executed by a collective of hacker groups, including Scattered Spider, Lapsus$, and ShinyHunters. JLR's production halt resulted in losses of approximately £50 million per week, significantly affecting their second-quarter financial results. The impact extended to JLR's supply chain, with smaller businesses facing substantial losses. In response, the UK government offered a £1.5 billion loan, but JLR opted for a cash-up-front scheme for suppliers. CEO Adrian Mardell described the situation as a challenging quarter, emphasizing the need for recovery and prioritization of vehicle deliveries. The attack is categorized as a “Category 3” systemic event by the CMC, indicating severe implications for the manufacturing sector.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Following this threat?
Track Jaguar Land Rover in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…
Critical Zero-Day Exploit Found in BeyondTrust Remote Support BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE since August 2026. This flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring…