JLR Hack Costs £1.9bn, Called UK’s Costliest Cyberattack

On 22 October 2025 the Cyber Monitoring Centre (CMC) published a report estimating the late‑August/September cyberattack on Jaguar Land Rover cost the UK economy about £1.9bn (modelled range £1.6–£2.1bn) and affected more than 5,000 organisations. The attack knocked out JLR’s IT systems and halted production at Solihull, Halewood and Wolverhampton for roughly five weeks, causing modelled weekly losses of about £108m and leaving JLR to bear more than half of the total through lost output, recovery costs and supplier disruption. The CMC classified the incident as a Category 3 systemic event, called it the most financially damaging UK cyber event to date, and warned total costs could rise if operational technology was affected or if recovery is delayed. The disruption rippled across JLR’s multi‑tier supply chain and dealerships, prompting a £1.5bn UK government loan guarantee to help the carmaker support suppliers and prompting calls from cyber experts, including former NCSC head Ciaran Martin, for stronger corporate cyber defences. Independent estimates put the direct hit to Tata‑owned JLR at about £540m (around a third of its 2024–25 profit) and some analysts warned potential revenue losses could be as high as £2bn given limited insurance cover. The CMC projects a phased return to full operations by January 2026 but warned recovery and costs remain at risk if setbacks occur.