United Kingdom
GBR
Cyberattack forces JAGUAR LAND ROVER to halt production and retail operations
JAGUAR LAND ROVER detected a cyber incident on 31/08/2025 and paused production from 01/09/2025. The company shut down IT systems, disrupting manufacturing and retail operations, and on 23/09/2025 said the production pause would continue until 01/10/2025 while working with cybersecurity specialists, the UK NCSC and law enforcement—showing prolonged operational and supply‑chain impact.
85
Estimated severity
85 / 100
82
Source reliability
82 / 100
Approximate Date
31/08/2025
Targeted Company
JAGUAR LAND ROVER
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
No information
Geographic Impact
Country Targeted Company
Other Affected Countries
No other affected countries reported
Target country
United Kingdom
Affected countries
United Kingdom
Impacted regions
United Kingdom · United Kingdom
Operational Impact
Duration
30 days
Financial impact (USD M)
No information
Impact types
Facility shutdownProduction interruptionOrder processing disruptionOperational disruption
Affected sectors
ManufacturingRetail
Affected departments
Production & ManufacturingInformation TechnologyOrder ManagementCustomer Service
Attack Profile
Attack types
Unauthorized access
Attributed threat actors
SCATTERED SPIDER
Sources
Incident Sources
cybersecuritydive.comhttps://www.cybersecuritydive.com/news/jaguar-land-rover-extend-production-pause-cyberattack/760883en.wikipedia.orghttps://en.wikipedia.org/wiki/Jaguar_Land_Rover_cyberattackcybermonitoringcentre.comhttps://cybermonitoringcentre.com/2025/10/22/cyber-monitoring-centre-statement-on-the-jaguar-land-rovercyber-incident-october-2025periculo.co.ukhttps://www.periculo.co.uk/cyber-security-blog/jaguar-land-rover-cyberattack-lessons-every-business-should-learncitalid.comhttps://citalid.com/resources/jaguar-land-rover-cyber-attack