Tata Motors-owned luxury carmaker Jaguar Land Rover (JLR) has announced an extended production pause until Wednesday, 1 October 2025, due to the ongoing impact of a cybersecurity attack that disrupted operations earlier this month.
"Today we have informed colleagues, suppliers and partners that we have extended the current pause in production until Wednesday 1 October 2025," JLR said in a statement. "We have made this decision to give clarity for the coming week as we build the timeline for the phased restart of our operations and continue our investigation."
The company had earlier halted production until September 24 following the cyberattack on September 2. JLR confirmed its teams are working with cybersecurity experts, the UK’s National Cyber Security Centre (NCSC), and law enforcement agencies to ensure a safe and controlled restart.
"Our focus remains on supporting our customers, suppliers, colleagues, and our retailers who remain open. We fully recognise this is a difficult time for all connected with JLR and we thank everyone for their continued support and patience," the statement added.
The production shutdown has severely affected JLR’s three UK factories, which typically manufacture around 1,000 vehicles daily. The disruption has already cost the automaker tens of millions of pounds, while many of its 33,000 employees have been instructed to stay home.
The halt has also put strain on the wider British automotive supply chain, which supports about 104,000 jobs. The Unite trade union has urged the government to step in, warning that prolonged disruption could risk job losses. In response, the UK government stated it is working closely with JLR to evaluate the impact.
The breach has also disrupted repair services, leading to potential delays for Jaguar and Land Rover customers requiring replacement parts. The cyberattack coincided with the release of new UK registration plates on 1 September, typically a peak sales period.
A hacker collective calling itself “Scattered Lapsus$ Hunters”, reportedly made up of English-speaking teenagers linked to earlier attacks, has claimed responsibility. The group shared images with the BBC allegedly showing JLR’s internal troubleshooting documents and system logs, suggesting unauthorized access to sensitive company data.
JLR has ramped up its cybersecurity efforts in recent years, including a five-year £800 million contract with Tata Consultancy Services (TCS) in 2023 to enhance IT and security infrastructure. The timing of the cyber incident is particularly challenging as the company already faces declining profits, partly due to rising costs linked to U.S. tariffs.
"We are very sorry for the continued disruption this incident is causing and we will continue to update as the investigation progresses," JLR said.
