Jaguar Land Rover’s global assembly network remains frozen more than two weeks after a crippling cyberattack, with suppliers warning that prolonged disruption could push smaller firms toward insolvency. The company has told partners that U.K. plants will remain shut until at least September 24, though industry sources caution that recovery may take far longer.
Operations at a Standstill Across Key Sites
The attack, which forced JLR to shut down its IT systems, has halted production at its Solihull and Halewood plants, the Wolverhampton engine facility, and large factories in Slovakia and China. A smaller plant in India is also affected. The stoppage is costing the company an estimated £50 million a week in lost output, according to analysts, with more than 1,000 vehicles a day normally produced across the network. Restarting operations has proved more complex than expected, as JLR undertakes a phased forensic investigation to secure systems before allowing assembly lines to resume.
The company, owned by India’s Tata Motors, has acknowledged that some data may have been viewed or stolen, highlighting the growing vulnerability of automakers to ransomware and supply chain–oriented cybercrime. A group calling itself Scattered Lapsus$ Hunters has claimed responsibility, the same collective linked to recent attacks on Marks & Spencer and Co-op.
Suppliers Brace for Cash Crunch
The knock-on effects are spreading quickly. Many of JLR’s suppliers are small and midsize businesses with limited liquidity, and several have told industry groups that they cannot sustain weeks of halted orders. Union leaders in the West Midlands warn that redundancies are already under discussion. Unite has called for a furlough scheme to protect jobs, while the Commons Business and Trade Committee has pressed the chancellor to outline measures to support firms at risk of collapse.
Although JLR has dismissed speculation about shutdowns lasting into November, industry experts note that even a controlled restart will not immediately return output to normal levels. Supply chain resilience is a particular concern: if JLR attempts to switch production back on abruptly, the supporting ecosystem of parts makers may not be intact. “We need to have a supply chain to supply Jaguar Land Rover,” a Unite official told the BBC. “If they expect it to be ready on the bench, it won’t be there.”
A Deeper Strategic Risk
Beyond immediate production losses, the attack highlights how dependent automakers have become on uninterrupted digital infrastructure. Recent data from the European Union Agency for Cybersecurity shows the automotive sector is now one of the top five targets for ransomware globally, reflecting its complex supply chains and reliance on real-time IT systems. For JLR, the financial damage will eventually be measured not only in lost vehicles but in potential erosion of supplier trust and long-term competitive position.
Even after systems are restored, car buyers and partners alike may question the resilience of a brand that must compete globally with rivals such as BMW and Mercedes, both of which have stepped up investment in cybersecurity defenses. The bigger test for JLR is whether it can turn crisis into an inflection point, one that forces faster fortification of digital supply chains across the sector.
