Cyberattack on Jaguar Land Rover Costs Company £1.9 Billion, Says CMC

Experts from the independent cybersecurity organisation CMC reported that the cyberattack on British luxury car manufacturer Jaguar Land Rover cost the company an estimated £1.9 billion.

 

In early September 2025, JLR suffered a major cyberattack that forced the company to shut down multiple critical systems, including those at its UK factories such as the Solihull plant. This shutdown caused severe disruption to both production and retail operations, with factory staff told to stay home for several weeks. The incident also impacted UK dealers, who were unable to register new vehicles or supply parts, directly affecting revenue.

 

The attack was claimed by the Scattered Lapsus$ Hunters hacking group, which said it exploited stolen Atlassian JIRA credentials obtained over several years through malware infections and phishing campaigns targeting Jaguar Land Rover employees. According to reports, the hackers allegedly exfiltrated up to 350GB of sensitive data, including source code, proprietary documents, and employee information, which was later leaked on dark web forums.

 

Earlier this month, the UK government announced a £1.5 billion loan to JLR under the UK Export Finance’s Export Development Guarantee (EDG) scheme, which mitigates lender risk by guaranteeing most of the loan if JLR fails to repay.

 

JLR gradually resumed manufacturing operations in early October 2025, restarting production in phases at key UK sites and its facility in Slovakia.

 

Experts at the Cyber Monitoring Centre have estimated that the cyber attack on JLR cost the UK economy approximately £1.9 billion ($2.5 billion). CMC described the incident as “the most economically damaging cyber event” to ever impact the United Kingdom.

 

“The CMC model estimates the event caused a UK financial impact of £1.9 billion and affected over 5,000 UK organisations. The modelled range of loss is £1.6 billion to £2.1 billion but this could be higher if operational technology has been significantly impacted or there are unexpected delays in bringing production back to pre-event levels.

 

“This estimate reflects the substantial disruption to JLR’s manufacturing, to its multi-tier manufacturing supply chain, and to downstream organisations including dealerships,” CMC said.