Surge in Ransomware Attacks on Manufacturers Post-JLR Incident

• •Ransomware attacks on manufacturers increased by 40% year-over-year in 2026.
• •The Jaguar Land Rover cyberattack in August 2025 halted production and affected over 5,000 companies.
• •New ransomware groups are emerging, with The Gentlemen responsible for 12% of 2026 incidents.

In August 2025, Jaguar Land Rover (JLR) shut down its global IT systems to contain a cyberattack, halting production at its UK plants for over five weeks. This incident affected around 1,000 vehicles daily and impacted over 5,000 other companies, contributing to a 27% drop in UK car production in September. The Bank of England cited the attack as a factor in lower national growth forecasts. In 2026, ransomware attacks on manufacturers surged by nearly 40% year-over-year, with 1,183 new incidents recorded in the first seven months. A significant portion of these attacks involved new ransomware groups, including The Gentlemen, which accounted for 12% of incidents. The economic impact of the JLR attack was estimated at £1.9 billion, marking it as one of the most damaging cyberattacks in UK history. The Black Kite 2026 Manufacturing & Distribution Ransomware Report highlights the ongoing vulnerability of the manufacturing sector to ransomware threats.