Jaguar Land Rover (JLR) has confirmed that a cyber attack on the company has resulted in a data breach, affecting some customer and supplier information. The carmaker, Britain's largest, stated on Wednesday that its ongoing investigation into the hack, which first emerged last week, has revealed that data was compromised.
JLR has notified relevant regulators, including the Information Commissioner's Office, and will contact individuals whose data may have been impacted. However, the company has not disclosed specific details about the type of data stolen or whether it includes customer or supplier information.
The cyber attack has caused significant disruption to JLR's operations. Production at its factories in the Midlands and Merseyside has been halted until at least Thursday, with workers told not to return until next Monday. Other production facilities worldwide are also affected, and it could be weeks before systems are fully operational.
Suppliers and retailers have also been impacted, with some unable to access computer systems used for sourcing spare parts or registering vehicles. JLR is working with third-party cybersecurity specialists to restore applications safely.
A group of English-speaking hackers, linked to previous attacks on retailers including M&S, has claimed responsibility. Screenshots purportedly showing JLR's internal IT systems were posted on a Telegram channel associated with hacker groups Scattered Spider, Lapsus$, and ShinyHunters.
