Redazione RHC : 23 October 2025 18:35
Jaguar Land Rover continues to deal with the fallout from the cyber attack that paralyzed production, disrupted its dealer network, and jeopardized supply chains.
Vehicle production at major UK plants was halted for nearly five weeks. A reduction in production of nearly 5,000 vehicles per week was recorded in the UK during the shutdown, resulting in an estimated weekly loss of £108 million for JLR’s UK operations , including both fixed costs and lost profits.
The Cyber Monitoring Centre estimates that the event caused a financial impact in the UK of £1.9 billion and affected over 5,000 UK organizations . The modeled loss range is £1.6 billion to £2.1 billion, but could be higher if there is a significant impact on operational technology or unforeseen delays in returning production to pre-event levels. This estimate reflects the substantial disruption to JLR’s production, its multi-tier supply chain, and downstream organizations, including dealerships. The estimate is sensitive to key assumptions, including the date JLR will be able to fully restore production and the profile of the recovery; these and other assumptions and limitations are discussed later in this document.
The financial impact assessment is based on a return to full production in early January 2026. Following the COVID-related shutdowns, JLR took several weeks to return to full production. A return in early January is based on expert input that JLR will likely encounter additional challenges in its return to full operations due to ongoing IT infrastructure challenges or supply chain constraints.
The return to full production is expected to be challenging, with the possibility of unforeseen issues that will need to be resolved. A smooth recovery has been assumed from October 8, when the return to limited production was announced, until early January 2026.
The Cyber Monitoring Centre reported that for reasons currently unclear, fewer technical details about this incident have emerged publicly than usual in similar cases.
Assessing the financial impact of the accident depends heavily on the technical details, especially regarding the impact on JLR’s Operational Technology (OT), a key aspect in this context.
The extent of the impact will depend on the extent of the malicious exploits performed, the systems affected, and the potential further consequences that could arise from an uncontrolled outage.
A production shutdown means there was a significant risk that attackers could or would have compromised essential operational infrastructure, thus increasing the risk of malicious interaction between operating systems and IT systems. However, the resumption of production in early October suggests that the extent of this risk is likely limited.
Redazione