Jaguar Land Rover (JLR) has laid out the financial toll of the cyberattack that brought its production lines to a standstill earlier this year, confirming losses of £196 million ($220 million) for the quarter spanning July to September. The automaker disclosed the figures in its latest financial report, underscoring how the attack reverberated across its operations, supply chain, and bottom line.
Attack Sparks Sudden Halt Across Key Plants
The cyber incident, first announced on September 2, 2025, forced JLR to make an unprecedented move: shut down production at several major factories and send thousands of employees home while the company worked to contain the breach. Soon after, JLR confirmed that sensitive data had been stolen. A group known as Scattered Lapsus$ Hunters took responsibility for the breach via Telegram, escalating concerns about the scale and intent of the attack.
The timing could not have been worse for the company. As the automotive sector continues to navigate fluctuating demand, global supply chain issues, and rising costs, the cyberattack added a layer of disruption that rippled across nearly every part of JLR’s operations.
Weeks of Disruption Weigh on Suppliers and the Broader Supply Chain
The incident triggered a chain reaction far beyond the initial shutdown. As production remained offline for weeks, suppliers dependent on consistent orders from JLR began to feel the strain. Some saw their liquidity dry up, raising the possibility of wider supply chain breakdowns if key partners could no longer stay afloat.
This deepening strain highlighted just how interconnected JLR’s manufacturing ecosystem is. The uncertainty pushed the company into a precarious position, prompting urgent discussions between company leaders, suppliers, and government officials.
Government Moves to Support JLR With £1.5 Billion Loan Guarantee
To prevent a prolonged manufacturing collapse, the UK Government stepped in on September 29, 2025, with a £1.5 billion loan guarantee designed to stabilize operations and restore confidence. The intervention helped JLR secure the financial backing needed to revive production and shore up suppliers who had been pushed to the brink.
With support in place, JLR initiated a phased restart of its factories. Production lines gradually came back online, and by October 8, 2025, the company confirmed operations had resumed across all major sites.
Financial Results Reveal Sharp Downturn
JLR’s quarterly numbers reflect the full weight of the disruption. The company reported a loss before tax and exceptional items of £485 million for the second quarter—an abrupt reversal from the £398 million profit posted during the same quarter the previous year. For the first half of the fiscal year, the company recorded a loss of £134 million, compared with £1.1 billion in profit during the prior year’s first half.
Profit margins also deteriorated significantly. JLR’s EBIT margin dropped to (8.6)% for the quarter, falling sharply from 5.1% a year earlier. For the first half of the fiscal year, the margin hit (1.4)%, down from 7.1% during the same period in 2024.
The company pointed to several factors contributing to this downturn: the cyberattack itself, the halt in production volumes, ongoing U.S. tariffs affecting automotive exports, and higher vehicle marketing expenses.
Broader Economic Ripple Effects Highlight National Importance of JLR
The fallout from the cyberattack stretched beyond JLR’s internal balance sheet. In its recent Monetary Policy Report, the Bank of England cited the JLR shutdown as one of the contributors to weaker-than-expected UK GDP results for the third quarter of 2025. The disruption at one of the country’s largest automotive exporters weighed on national output and highlighted the broader economic implications when major manufacturers face operational paralysis.
This acknowledgment underscored the strategic importance of JLR within the UK’s industrial landscape—and why government intervention was deemed essential.
JLR Says Operations Are Stable Again, Investment Plans Remain Intact
Despite the turbulence, JLR now reports that its operations have returned to stability. Wholesale distribution, logistics operations, and supplier financing channels have been restored. The company emphasized that it has been working closely with suppliers to strengthen communication and prevent further vulnerabilities in the months ahead.
Notably, JLR confirmed that the cyberattack has not derailed its long-term investment commitments. The company plans to maintain £18 billion in investment over five years starting from FY24, directing funds toward electric vehicle development, digital technologies, and future-focused manufacturing capabilities.
