New Delhi: Tata Motors-owned Jaguar Land Rover (JLR) has extended its production halt for another week as the company continues to address a cyberattack that occurred over two weeks ago. The British luxury automaker’s factories in Merseyside, north-west England, and Solihull in the West Midlands, alongside facilities in India, Slovakia, and China, have remained inactive since the shutdown of their IT network. In a recent update provided to suppliers, JLR confirmed that its “forensic investigation” into the incident is ongoing.
“Today we have informed colleagues, suppliers, and partners that we have extended the current pause in our production until Wednesday, 24th September 2025,” the JLR statement noted. “This decision has been made as our forensic investigation of the cyber incident continues, and as we assess the different stages of the controlled restart of our global operations, which will take time. We apologize for the ongoing disruption this incident is causing and will continue to provide updates as the investigation develops.”
Shutdown Causing Financial Losses
Industry insiders have indicated to the BBC that the ongoing shutdown is estimated to be costing the company around £50 million per week in lost production. Typically, the brand produces over 1,000 vehicles daily. There is increasing concern among small and medium-sized businesses that form a part of the supply chain for the UK’s largest car manufacturer.
“I fully recognise the anxiety and deep concern that employees at Jaguar Land Rover and across the supply chain will be feeling,” stated Chris Bryant, the Department for Business and Trade minister, last week in the House of Commons. “The government and the National Cyber Security Centre will do everything in our power to help resolve this situation as swiftly as possible.”
Bryant described Jaguar Land Rover as an “iconic national brand” and a “very significant employer” in the UK, with 34,000 employees in the country and a total of 39,000 globally. Trade union representatives have appealed to the government for financial assistance as the company and its supply chain manage the extended halt in production.
“Thousands of workers in the JLR supply chain are now facing immediate job threats due to the cyberattack,” said Sharon Graham, general secretary of the Unite union. “Ministers need to act quickly and introduce a furlough scheme to ensure that vital jobs and skills are not lost while JLR and its supply chain work to recover.”
A hacker group identifying itself as Scattered Lapsus$ Hunters is believed to have claimed responsibility for the attack. This group is also linked to a series of other high-profile cyberattacks on UK retailers earlier this year, including Marks & Spencer and Co-op.