Jaguar Land Rover in daily talks with government as cyber attack halts production

Jaguar Land Rover is in daily contact with the government as it seeks to restore IT systems and restart production following a serious cyber attack that prompted the carmaker to switch off its networks more than a week ago, Business and Trade Minister Sir Chris Bryant told MPs.

The decision to isolate systems has left JLR unable to operate production lines in the U.K. or abroad and forced workers at vehicle assembly plants in Halewood and Solihull and at the engine factory in Wolverhampton to remain at home. The factories are not currently expected to reopen until Thursday at the earliest, and the company is assessing its networks and making day-by-day decisions, Sir Chris said.

The government has been monitoring the situation closely, Sir Chris told parliament, and the National Cyber Security Centre has been working with JLR since last Wednesday. He said he had spoken to the company and planned to meet the chief executive later in the week. The Information Commissioner’s Office has also been notified, he added. The minister declined to comment on the identity of the attackers or how long remediation would take, but stressed that prosecuting those responsible for hacking incidents remained a priority.

JLR said it turned off its IT systems to protect them from damage after the attack. New car sales and servicing have been heavily disrupted, an impact amplified by the timing: the stoppage occurred during a peak sales period that follows the release of new registration plates on Sept. 1. The company has not been able to operate production lines either in the U.K. or at facilities abroad since the shutdown.

The incident has had knock-on effects across JLR’s supply chain. Sir Chris acknowledged that key parts suppliers, including Evtec, WH Plastics, Suretec and Opmobility, face an "even more complex situation" than JLR itself and said the government would seek to ensure they received "every possible support." MPs from constituencies around the affected plants will have an opportunity to put questions to the company during a Zoom call scheduled for Friday, the minister said.

Last week a group of cybercriminals that previously disrupted Marks & Spencer and the Co-op claimed responsibility for the attack on JLR, according to public statements. Officials have not publicly confirmed the attribution, and Sir Chris refrained from naming suspects while noting information already in the public domain.

Industry analysts and supply-chain specialists have warned that even a short disruption at a major car manufacturer can ripple widely through parts suppliers and dealerships, delaying deliveries, servicing and payments. JLR’s shutdown comes at a sensitive time for the automotive industry, which has been managing recurring supply-chain pressures since the pandemic, including semiconductor shortages and logistical constraints.

Government engagement reflects the potential economic and employment consequences of a prolonged halt at one of Britain’s largest carmakers. Sir Chris said ministers were "monitoring the situation very closely" and coordinating with national cyber experts and regulatory bodies as JLR works to bring its systems back online and resume manufacturing and retail operations.