Threat Intelligence · Incident Response
Jaguar Land Rover cyber-attack linked to state-backed hackers
A former UK minister says the 2025 cyber-attack on Jaguar Land Rover was state-sponsored, costing the company up to £2.1bn and disrupting thousands of businesses.
Ross Grant2 min read
The short version
Jaguar Land Rover was hit by a major cyber-attack in August 2025. The attack stopped production for five weeks and affected thousands of workers and suppliers. A former UK minister says the attack was backed by a foreign government, but the UK has not officially confirmed who was responsible. The attack cost the company up to £2.1bn.
By the numbers
- £2.1bnestimated cost of the attackThe Telegraph
- 5 weekslength of production halt at Jaguar Land RoverThe Telegraph
- 200,000jobs affected by the attackThe Telegraph
- 5,000partner organisations disruptedThe Telegraph
What happened?
A cyber-attack in August 2025 forced Jaguar Land Rover to halt production for five weeks, affecting 200,000 jobs and about 5,000 partner organisations. The attack is now described as state-sponsored by a former UK defence minister, though no official government assessment has been released. The financial impact is estimated at up to £2.1bn, making it the most expensive cyber-attack in British history. The UK government has not named the group or country responsible.
Who is affected
The cyber-attack on Jaguar Land Rover (JLR) in August 2025 forced the company to halt production for five weeks. This put 200,000 jobs at risk, as JLR was unable to resume much of its operations during that period. The disruption also affected around 5,000 organisations, including car showrooms, repair shops, and thousands of small manufacturers supplying parts and materials to JLR. The Telegraph (opens in a new tab)
What was taken
The sources do not specify exactly what data or systems were compromised. The main impact was operational, with production stopped and the supply chain disrupted. There is no public information about customer or employee data being stolen.
Who is behind it
According to The Telegraph, Al Carns, a former UK defence minister, stated that the attack was state-sponsored and likely backed by a hostile foreign power. This is the first time a government figure has publicly made this claim. The Telegraph previously reported that Russia was suspected, but no official assessment has been released. The New York Times reported that a group of Russian hackers was responsible, citing unnamed sources familiar with the investigation. However, the UK government has not confirmed these details and says it does not routinely comment on ongoing investigations.
What it has cost
The attack is estimated to have cost Jaguar Land Rover between £1.6bn and £2.1bn, according to the Cyber Monitoring Centre. This would make it the most expensive cyber-attack in British history. The financial impact includes halted production, supply chain disruption, and uncertainty for thousands of workers and partners.
The response
JLR has not made a detailed public statement about the attack or its recovery process. The government has also not released an official assessment or named the group or country responsible. Some politicians have criticised the government for not being more transparent. David Reed, a shadow defence minister, said the public "deserve answers" about such a financially damaging attack and accused the government of failing to hold attackers accountable. Al Carns clarified that his comments were not based on an official Ministry of Defence assessment, but he said it would be "highly unlikely" for an attack of this scale to happen without the knowledge of the host state.
Has this happened before?
The sources do not mention any previous incidents of this scale involving Jaguar Land Rover. However, the reporting notes wider concerns about the UK's vulnerability to cyber-attacks and recent incidents affecting other organisations, such as government agencies hit by a PHP flaw.
Claimed vs confirmed
- Unconfirmed
The attack was state-sponsored and likely backed by a foreign power.
A former UK defence minister made this claim, but the government has not released an official assessment or named the country responsible.
- Unconfirmed
Russia was behind the attack.
The Telegraph and The New York Times reported Russia as a suspect, citing unnamed sources, but no official confirmation has been made.
Why it matters
This attack shows how cyber-attacks can disrupt not just one company, but entire supply chains and thousands of jobs. The lack of official information leaves businesses and the public with unanswered questions about who is behind such attacks and how to prevent them.
Key points
- Jaguar Land Rover halted production for five weeks after a cyber-attack.
- 200,000 jobs and 5,000 partner organisations were affected.
- A former UK minister says the attack was state-sponsored, possibly by Russia.
- The financial impact is estimated at up to £2.1bn.
- The UK government has not officially named the attackers or released full details.
Sources
The Telegraph
Reference
