JLR Cyber Attack Impact on Car Production Revealed

A cyber attack has paralysed Jaguar Land Rover’s operations for five weeks, leading to a staggering £1.9bn loss and highlighting the vulnerability of modern automotive supply chains.

The attack, which began on 1 September, halted manufacturing and impacted an estimated 5,000 associated businesses. A full recovery is not expected before January 2026.

The breach stopped production at JLR’s three main UK sites in Solihull, Wolverhampton and Halewood, with no new vehicles built for five consecutive weeks.

According to the Society of Motor Manufacturers and Traders (SMMT), this single incident contributed to a 27% fall in UK car production for September, making it the worst September for the industry since 1952.

Cyber attack cripples production

The Cyber Monitoring Centre (CMC), a non-profit, classified the breach as a Category 3 event, denoting a serious external cyber threat.

“With a cost of nearly £2bn this incident looks to have been by some distance the single most financially damaging cyber event ever to hit the UK,” says CMC Chair Ciaran Martin.

He urged organisations to identify and protect their critical networks and then plan for how they would cope if the network were disrupted.

The CMC reports that the shutdown has affected at least 5,000 businesses, including a wide network of suppliers and service providers. The recovery for this extensive network is expected to continue well into 2026.

Supply chain support and government intervention

In response, the UK Government has intervened to help stabilise the disrupted supply chain, securing a £1.5bn loan guarantee for JLR.

This five-year facility is designed to provide JLR with the capital to support its vast supplier network, ensuring smaller partners remain solvent as operations are gradually restored.

“This cyber attack was not only an assault on an iconic British brand but on our world-leading automotive sector,” says Business and Trade Secretary Peter Kyle.

While other UK carmakers reported stable output, the halt at JLR was the primary cause of the nation’s production decline.

The impact was also felt in international markets as exports slumped by 24.5% in September. Shipments to key markets, including the EU, the US and South Korea, were considerably reduced.

Mike Hawes, CEO at the SMMT, says: “September's performance comes as no surprise given the total loss of production at Britain's biggest automotive employer following a cyber incident.”

Lasting effects on UK manufacturing

JLR has confirmed it is restarting manufacturing in a phased manner, but confidence in the nation's manufacturing sector has been shaken.

JLR is now under intense pressure to rebuild its IT infrastructure and stabilise its supplier network.

Autotrader’s Commercial Director Ian Plummer expects a rebound in demand once the crisis passes, similar to post-COVID trends.

Ian adds that, despite the production halt, JLR brands “have the highest number of monthly sales leads on Autotrader so there is demand out there".

The incident has brought renewed focus to the UK’s car manufacturing sector with calls for greater government support.

Mike warns that the Government's ambition to increase UK car production to 1.3 million units annually is now at risk.

He suggests that the potential termination of tax incentives linked to Employee Car Ownership Schemes (ECOS) could further undermine the industry's competitiveness.

“The industry is calling for rapid interventions to shore up its competitiveness,” continues Mike. He suggests keeping ECOS schemes and introducing programmes to bolster supply chain resilience.