
Jaguar Land Rover (JLR), the iconic British carmaker owned by India’s Tata Motors, has confirmed a cybersecurity breach that has compromised some internal data and caused widespread operational disruptions across its global facilities.
The company said it is working with external cybersecurity experts to investigate the breach, which has forced a shutdown of production lines in the UK and disrupted operations at plants abroad. Critical systems used by dealers and suppliers for ordering components and processing vehicle registrations have also been taken offline as a precaution.
Although JLR has not yet disclosed the specific nature of the data accessed, it assured the public that it is cooperating with relevant authorities, including the UK’s Information Commissioner’s Office (ICO). The company stated it will notify any affected individuals or partners once more details are confirmed through its ongoing forensic review.
“We are treating this incident with the highest priority and are committed to resolving the issue as quickly and securely as possible,” a JLR spokesperson said.
The timing of the breach could not be worse for Tata Motors, which is banking on JLR’s EV transition and strong sales performance in Europe and China to boost profitability. Following news of the cyberattack, Tata Motors’ shares slipped on Indian stock exchanges, as investor concerns grew over the potential financial impact from halted production and delayed vehicle deliveries.
Analysts warned that even a short-term disruption could affect revenue and supply chain stability, especially if dealer operations and customer services remain compromised.
This incident adds to a growing list of cyber threats targeting global manufacturers, underscoring the vulnerabilities in increasingly digitalized and connected industrial ecosystems. JLR, like many automakers, relies on complex digital systems across logistics, manufacturing, and retail, making it an attractive target for cybercriminals.
As the investigation continues, JLR has pledged to issue timely updates and resume operations as soon as safely possible.