Quick Highlights:

• Production halted until October 1, 2025 across key UK plants.

• Cyberattack contained, but full system restoration still in progress.

• 33,000 workers affected, plus thousands more across suppliers.

• £72 million in daily losses estimated during downtime.

• UK government and unions are pushing for worker and supplier support.

Jaguar Land Rover (JLR), the UK’s biggest carmaker and a Tata Motors subsidiary, is still reeling from a major cyberattack that forced a full production halt. The company has now confirmed that factories will stay closed until October 1, 2025, as IT systems are restored and safety checks continue.

The shutdown has already stretched nearly a month, disrupting supply chains, putting thousands of jobs at risk, and costing JLR millions each day. While authorities say the cyberattack is now under control, the fallout continues.

Jaguar Land Rover Cyberattack Timeline

The following timeline outlines how the situation unfolded:

Date	Key Event
August 31, 2025	JLR discovered the cyberattack and shut down UK factories.
September 2, 2025	Company confirmed a global IT systems breach.
September 16–24, 2025	Shutdown extended as forensic investigations continued.
September 23, 2025	JLR announced operations would remain halted until October 1, 2025.

Factories and Workers Impacted

• Sites affected: Halewood (Merseyside), Solihull (West Midlands), and Wolverhampton (engine plant).

• Workforce: Around 33,000 JLR employees directly impacted.

• Supply chain: Hundreds of SMEs tied to just-in-time deliveries also forced to scale back or pause operations.

Financial Losses and Production Disruption

• Daily cost: Estimated at £72 million in lost sales per day.

• Production loss: Roughly 1,000 vehicles per day usually built across JLR’s UK plants.

• Ripple effect: Delays could slow down JLR’s EV programme and export commitments in Europe and China.

Nature of the Cyberattack

• JLR has called it a cybersecurity breach of global IT systems.

• Some internal data was accessed, though no confirmed leak of customer data has been reported.

• UK’s National Cyber Security Centre (NCSC), law enforcement, and private cybersecurity experts are involved in the probe.

Wider Consequences

Supply Chain Strain

• Many small suppliers rely solely on JLR contracts.

• Temporary closures and reduced shifts are already hitting SMEs.

Employment Concerns

• Workers are stuck without production work.

• Unions are demanding government-backed support, similar to furlough schemes used during COVID-19.

Reputation and Strategy

• The incident highlights cybersecurity vulnerabilities in the auto industry.

• JLR’s electric vehicle rollout and rebranding initiatives risk delays.

JLR and Government Response

• Phased restart plan being designed, with safety and IT integrity as priorities.

• Government ministers have met with JLR executives and supplier groups to assess the economic fallout.

• Union pressure continues for emergency financial support for workers and supply chain companies.

What to Watch Next

1. System recovery: Confirmation of IT security restoration across plants.

2. Production restart: Safe relaunch of assembly lines in early October.

3. Data disclosures: Clarification on whether employee or supplier data was compromised.

4. Policy actions: Possible UK government support packages for workers and SMEs.

5. Strategic delays: Updates on EV projects and export timelines.

Jaguar Land Rover’s cyberattack-driven shutdown shows how vulnerable modern manufacturing has become to IT disruptions. With factories offline until October 1, 2025, the automaker faces mounting financial and reputational risks. Although the cyber threat is under control, the path back to normal production will depend on both system resilience and government support for the wider supply chain.