Jaguar Land Rover Operations Still Crippled Weeks After Cyberattack

Michael Accardi
by Michael Accardi

Jaguar Land Rover still hasn't been able to build cars at any of its global factories, three weeks after a cyberattack crippled the automaker’s computer systems.

Key Points

  • Jaguar Land Rover has been unable to build cars globally for three weeks following a massive cyberattack that crippled its IT systems.
  • The shutdown is putting strain on JLR’s supply chain, with experts warning some smaller suppliers could face bankruptcy if the disruption continues.
  • A group known as Scattered Lapsus$ Hunters has taken credit for the attack, which may have compromised customer data and is costing JLR millions of pounds daily.

The disruption has left production lines silent, dealer employees locked out of key systems, and suppliers crying about financial collapse.


The attack began on September 1, when JLR’s IT network was targeted and exploited via a flaw in JLR’s SAP Netweaver software. In a published statement, JLR has confirmed “some data” was affected, but the automaker hasn't disclosed whether customer details were stolen or if a ransom demand was made. "Our forensic investigation continues at pace, and we will contact anyone as appropriate if we find that their data has been impacted," the company wrote.


Autocar is reporting that JLR is losing more than $6 million per day as its global factories remain idle. The prolonged shutdown has also frozen parts orders and left dealerships unable to register vehicles, and dealer staff are allegedly using pens and paper to track parts and service orders.

Now, attention is turning to the ripple effects across JLR’s supply chain. Former Aston Martin CEO Andy Palmer warned that some suppliers may not survive. “You hold back in the first week or so of a shutdown; you bear those losses,” Palmer told the BBC. “But then you go into the second week, layoffs are either already happening or are being planned.”


So far, JLR has not given a timeline for restoring its systems or resuming production. The automaker said police and cybersecurity specialists have been brought in to help rebuild the automaker’s digital infrastructure “in a controlled and safe manner.”


Become an AutoGuide insider. Get the latest from the automotive world first by subscribing to our newsletter here.

Michael Accardi
Michael Accardi

An experienced automotive storyteller and accomplished photographer known for engaging and insightful content. Michael also brings a wealth of technical knowledge—he was part of the Ford GT program at Multimatic, oversaw a fleet of Audi TCR race cars, ziptied Lamborghini Super Trofeo cars back together, been over the wall during the Rolex 24, and worked in the intense world of IndyCar.

More by Michael Accardi

Comments
Join the conversation
Next