Jaguar Land Rover closes more factories after attack

Jaguar Land Rover (JLR) has extended the closure of its UK factories until at least Wednesday, more than a week after a major cyberattack paralyzed its operations. The disruption , which began after the company discovered the breach on August 31, affects its main car factories in Halewood and Solihull, as well as its engine plant in Wolverhampton, with implications for international sites in Slovakia, China and India.

See also: Jaguar Land Rover suffered a cyberattack

In order to contain the attack and protect its infrastructure, JLR made the critical decision to shut down its IT systems. While this was a necessary defensive measure, it caused significant disruption, immediately halting all vehicle production. Under normal operating conditions, Jaguar Land Rover produces around 1,000 vehicles per day, meaning the disruption has already resulted in significant production losses. Production line staff have been instructed to stay home as the company manages the crisis.

JLR said it was working closely with external cybersecurity and law enforcement to restore its networks in a controlled and secure manner. The company, owned by India’s Tata Motors, has not officially commented on reports suggesting the outage could extend for several more weeks. The impact of the shutdown has rippled across Jaguar Land Rover’s extensive supply chain. Some suppliers have been forced to tell their own staff not to come to work due to the disruption to production orders.

See also: Hacker says he leaked Jaguar Land Rover data

Shaun Adams, who runs car parts supplier Qualplast, previously expressed concern that a prolonged outage would force his business to take drastic measures to “future-proof” its operations. Beyond manufacturing, the attack initially left JLR dealerships unable to register new vehicles or order essential maintenance parts.

While it now appears that solutions are in place, the timing was particularly damaging, as the attack coincided with the launch of new license plates on September 1, a traditionally busy period for new car sales. A group of young, English-speaking hackers has claimed responsibility for the attack on the Telegram messaging platform. The same group was allegedly behind a similar incident involving British retailer M&S earlier this year.

See also: Jaguar launches the Type 00 electric concept

Security experts told the BBC that, according to screenshots shared by the hackers, the criminals had gained access to sensitive company information. It is understood the group is trying to extort money from the car giant. Jaguar Land Rover has acknowledged it is aware of the claims and confirmed an investigation is underway. The incident highlights the growing threat of financially motivated cyberattacks against major industrial targets.