Jaguar Land Rover (JLR) has published its financial results for the period July 1 - September 30, and the picture that emerges is harsh: the cyberattack that hit the company and was announced on September 2 cost 196 million pounds during the quarter.
The incident led to a temporary “freeze” of production at critical units of the group and thousands of employees suddenly found themselves outside of laboratories and production lines. Scattered Lapsus$ Hunters – a group linked to organized cybercrime – claimed responsibility via Telegram, confirming that they had stolen data and that the attack was not just a disruption, but a targeted digital intrusion.
A chain of problems that didn't stop in production
The turmoil quickly spread beyond JLR's walls. Weeks of delays created intense market pressure, undermined the company's position against its competitors and left some of its suppliers stranded, whose cash flow evaporated.
See also: Kraken ransomware: Targets Windows, Linux and VMware ESXi
The situation reached a point where, on September 29, 2025, the British government was forced to intervene, approving a loan guarantee of 1.5 billion pounds to ensure that the supply chain did not collapse. Production only restarted on October 8, at a gradual and conservative pace to avoid further disruption.
Profit slump and negative margins
The financial results now published by Jaguar Land Rover clearly show the extent of the damage. The company reported losses of £485 million for the second quarter and £134 million for the first half – a result of production disruptions and lost sales.
The company clarifies that the decline is directly related to the cyber incident, but also to other factors that burden its operations: US tariffs, reduced production volumes and increased VME (Variable Marketing Expenditure), i.e. promotional expenses that inflate costs.
See also: DoorDash: New data breach revealed
The impact on the United Kingdom
The attack not only affected the group, but also the wider economy of the country. In its Monetary Policy Report, the Bank of England notes that third-quarter GDP was weaker than forecast, highlighting that the incident at JLR was a determining factor.
Given that JLR is one of the largest industrial employers in the UK, the impact of such a prolonged shutdown was almost inevitable.
Jaguar Land Rover: Gradual return to normality
Despite all of the above, the company claims that its activities have now stabilized. Vehicle wholesale, logistics and supplier financing have now returned to full operation.
And perhaps most encouragingly: JLR's capital spending has not been curtailed. The company insists that its £18 billion five-year plan, from financial year 2024, remains intact.
See also: Washington Post's Oracle E-Suite Breach Affects Over 9,000 Employees and Contractors
What does this mean for the future of the company?
Jaguar Land Rover is emerging from one of its most difficult periods with visible financial wounds, but also with a rare dose of government support and industrial resolve. The big question is whether it can regain market confidence and protect itself from future threats at a time when cyberattacks are becoming increasingly targeted.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
For now, the only thing certain is that the incident is a case study in how vulnerable a leading automotive company can become when its digital shield is not sufficiently shielded.
Source: www.bleepingcomputer.com
