Jaguar Land Rover Cyberattack Could Be the Costliest in UK History
A devastating cyberattack on Jaguar Land Rover (JLR) has left the company reeling with a staggering estimated cost of £1.9 billion ($2.6 billion), making it the most economically damaging cyber event to hit the UK, according to an official report.
The Cyber Monitoring Centre described the incident as "the most economically damaging cyber event to hit the UK," ranking its effects more highly than those of a similar attack on Marks & Spencer (M&S) earlier in 2025. Over 5,000 related organizations in the UK have been affected, including suppliers and dealerships, widening the breach's impact.
During the shutdown, which lasted around 5-6 weeks, JLR was losing an estimated £50 million per week, resulting in a significant financial burden on the company. To mitigate this, JLR secured a £1.5 billion ($2 billion) government loan to support both its core operations and its suppliers.
Although systems are back up and running to a certain degree, it could take until early 2026 before JLR reaches a full state of recovery. The company's factories in Solihull, Halewood, and Wolverhampton were affected, impacting the company's 1,000 daily car production output.
The Cyber Monitoring Centre also categorized JLR's attack as a level three incident, with five being the highest, suggesting potential future attacks could be even more damaging. In comparison, M&S, Co-op, and Harrods attacks earlier this year scored a level two, with total costs estimated at £270-440 million.
However, JLR has still not disclosed the type of attack it faced or whether or not it paid a ransom (which is not included in the estimate above). On October 7, JLR noted a 24.2% year-over-year decrease in wholesales, citing "challenging quarter" as the reason.
"It has been a challenging quarter for JLR. In the first two months our performance was robust and in line with our expectations," said CEO Adrian Mardell. "We know there is much more to do but our recovery is firmly underway."
What's Next for Jaguar Land Rover?
The cyber incident comes just months after JLR confirmed it would be winding down Jaguar sales as the brand undergoes a total reinvention. As the company navigates its recovery, it will be crucial to assess what measures can be taken to prevent similar attacks in the future.
"We are committed to transparency and will share more information about this incident when it is appropriate," said JLR's CEO Adrian Mardell in a statement. "Our focus remains on getting back to business as usual and supporting our customers."
Sign Up for TechRadar Pro
Want to stay up-to-date with the latest tech news, reviews, and expert opinion? Sign up to the TechRadar Pro newsletter today and get access to a wealth of information on the latest developments in the tech industry.
About the Author
Craig is a seasoned journalist with several years' experience freelancing in tech and automotive circles. His specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation.