Jaguar Land Rover: Update on the cyberattack and its unprecedented economic impact

The cyberattack that paralyzed Jaguar Land Rover (JLR) since late August has continued to generate headlines, revealing the devastating economic and business impact on the automotive giant and its extensive supply chain. New estimates from independent bodies and economic agencies place direct and collateral losses in historic figures for the United Kingdom.

‍

The numbers of the cyberattack: record losses

The hack orchestrated by the group Scattered Lapsus$ Hunters brought all of JLR's global plants to a standstill for more than five weeks, affecting more than 5,000 related companies, suppliers and contractors. According to the Cyber Security Monitoring Center and international analysts, the financial impact exceeds 1.9 billion pounds (about 2.55 billion dollars), being considered the most costly incident in the history of British cybersecurity.

The blockade of production of approximately 1,000 vehicles per day impacted JLR's revenues and profitability, with up to 83 million euros in revenue lost daily and suppliers having to suspend more than 6,000 jobs. The British government has intervened with a loan guarantee of 1.5 billion pounds to mitigate the crisis and protect the industrial sector.

​

Operational and supply chain implications

In addition to the direct cost, the interruption has affected stock, logistics and customer confidence, even leading to rumors - denied by JLR - about the loss of track of thousands of vehicles in transit. The full recovery of manufacturing is expected in January 2026, but the damage to the network of suppliers, dealers and international markets will last in the medium term.

​

Data breach and secondary threats

Investigations have confirmed access to about 350 GB of sensitive data, including development records, source code, and employee and vehicle information. Information continues about rescue negotiations, leaks and increased reputational risk, alerting both customers and authorities to the safety of the European and British automotive industry.

​

Keys to the attack and lessons learned

The attack originated by exploiting vulnerabilities in third-party software (SAP Netweaver) and through social engineering aimed at employees. The need to strengthen the cyber resilience of supply chains, improve controls over critical systems and train the entire industrial ecosystem are key lessons from this incident.

‍

Are you sure how to strengthen your company in the face of cyberattacks that can paralyze your entire operation?‍

At Apolo Cybersecurity, we help identify vulnerabilities, form teams and design contingency strategies for the protection of critical assets and business resilience.

‍