JLR Cyberattack Production Restart: Jaguar Land Rover to Resume Manufacturing After Six Week Shutdown

Jaguar Land Rover is set to begin a phased resumption of operations tomorrow after a complete shutdown lasting over six weeks. The disruption began on September 1, when a major cyberattack forced the luxury automaker to halt all IT systems and production across its key facilities

Six Week Cyberattack Brings JLR Operations to a Halt

• On September 1, JLR experienced a significant cyber incident which led to a total operational blackout
• The cyberattack caused the company to stop production and shut down its IT networks at key locations in the UK and abroad
• According to business economics professor David Bailey, the outage cost JLR as much as GBP 5 million per day making this one of the most severe disruptions in recent history
• The attack affected the company’s extensive UK based supply chain and delayed vehicle deliveries globally

This six week halt highlights the risks luxury automakers face in an era where digital systems are tightly integrated into manufacturing and logistics operations.

Controlled Comeback- Phased JLR Resume Production

Jaguar Land Rover is taking a controlled approach to restarting production to avoid further issues-

Phase 1 – Engine and Battery Production- Operations will begin at the Wolverhampton engine plant and the Coleshill battery assembly centre. These are critical for powering vehicles and supporting the supply chain

Phase 2 – Vehicle Production Components- Following the initial phase, key areas at the Solihull vehicle plant, including the body shop, paint shop, and logistics centre, will restart on October 8

The sequence prioritizes component manufacturing first to ensure smooth operations when full vehicle assembly resumes

This phased approach ensures that the manufacturing lines can safely return to work without risking additional downtime or IT complications.

Range Rover and Defender Production Lines to Resume

The main vehicle assembly lines will resume soon after the initial restart of components

• The Range Rover and Range Rover Sport production lines in Solihull are among the first to restart vehicle assembly
• In Slovakia the Land Rover Defender and Land Rover Discovery lines at the Nitra facility are also scheduled to resume production later this week
• These steps mark a significant recovery for JLR after the extensive disruption caused by the cyberattack

Financial Impacts and Government Support

The cyberattack caused substantial financial losses

• The shutdown led to revenue losses of GBP 5 million per day during the six-week halt.
• To help stabilize the situation, the UK government offered a GBP 1.5 billion loan guarantee to support JLR’s supply chain.
• JLR also introduced a financing scheme to assist its 700 UK suppliers, which collectively employ around 150,000 people.

These measures are designed to ensure suppliers can maintain operations and reduce further disruption to the luxury carmaker’s global supply chain.

Details of the Cyberattack

• The attack was carried out by a hacker group known as Scattered Lapsus$ Hunters
• They reportedly exploited a vulnerability in SAP Netweaver software, gaining access to customer data
• The cyberattack forced JLR to take a complete precautionary shutdown to prevent additional damage to systems and vehicles in production

This incident emphasizes the importance of cybersecurity in modern automotive manufacturing, where even a temporary outage can lead to substantial financial and operational losses.

Timeline for Full Recovery

• While production is restarting in phases JLR has warned that it will take several weeks to return to full operating speed
• Clearing the backlog of luxury SUV orders remains a priority as high demand has built up during the shutdown
• The company is closely monitoring each phase of the restart to ensure smooth operations and avoid further delays

JLR’s step by step approach reflects a cautious but necessary strategy to recover from one of the most serious JLR cyber incidents in recent times.

The JLR cyberattack serves as a reminder of the risks posed by digital threats to modern manufacturing. With a phased approach JLR aims to resume production of its flagship vehicles including the Range Rover, Defender and Discovery, while maintaining security and minimizing further disruptions. The financial support from the UK government combined with supplier financing schemes, will help stabilize the luxury automaker’s supply chain as it moves toward full recovery