Jaguar Land Rover says cyberattack severely disrupted production; no evidence of customer data theft yet

Jaguar Land Rover said a cyberattack forced the automaker to shut down several systems as part of mitigation, severely disrupting production and retail operations. In a brief statement on its official site, JLR said there was no evidence at this stage that customer data had been stolen.

The company said it had “taken immediate action to mitigate its impact by proactively shutting down our systems,” and is “now working at pace to restart our global applications in a controlled manner”.

The disruption, which began over the weekend, was first reported by UK dealers who were unable to register new cars or obtain parts at service points.

The Solihull production plant, a key site for models such as the Land Rover Discovery, Range Rover and Range Rover Sport, was cited in communications as affected by the attack.

Jaguar Land Rover, which operates as a single company under Tata Motors India, reported annual revenue of more than $38 billion and employs about 39,000 people. The automaker did not provide a timeline for resuming normal operations and, at the time of reporting, no ransomware group had claimed responsibility.

The incident underscores ongoing concerns about vulnerabilities in automotive supply chains and manufacturing networks as companies contend with disruptive cyber events.