Jaguar Land Rover Crippled by Ransomware Attack: 200,000 Jobs at Risk
Jaguar Land Rover (JLR) has been crippled by a suspected ransomware cybersecurity attack since August 31, 2025. The incident has brought production to a halt at its UK sites and disrupted operations worldwide, with significant impacts on suppliers and the wider automotive industry.
The attack, which began on August 31, has paralyzed JLR's IT systems, affecting more than 33,000 staff in the UK. Assembly lines are operating minimal shifts, and maintenance teams are idling. The company has extended its global production shutdown until October 1, 2025.
The disruption is felt beyond JLR's walls. About a quarter of its suppliers have already paused production and laid off workers, with more expected to follow suit. The wider supply chain is severely impacted, putting an estimated 200,000 jobs at risk across hundreds of supplier companies. In India, vehicle production backlogs of 3-8 months are expected, with a monthly capacity of 1,000 vehicles.
Government officials from the National Cyber Security Centre (NCSC) and Tata Consultancy Services (TCS) are coordinating a secure phased restart for JLR. However, dealers worldwide are unable to register vehicles, order spare parts, or use diagnostic software due to the cybersecurity attack.
The cybersecurity attack on JLR has caused significant disruption to the automotive giant and its supply chain. With production shutdowns and job losses mounting, the industry eagerly awaits a secure restart coordinated by government officials and cybersecurity experts.
