Cyber Monitoring Centre (CMC) released a report in late 2025 detailing the staggering financial fallout of the Jaguar Land Rover (JLR) cyber attack.
It is now considered the most economically damaging cyber event in UK history. Here is a breakdown of the figures and the impact:
The Financial Impact
Total Economic Cost: The CMC estimated the total loss to the UK economy to be £1.9 billion, with a modelled range reaching up to £2.1 billion.
Weekly Losses: During the peak of the shutdown, JLR was reportedly losing approximately £50 million per week.
Systemic Classification: The event was classified as a Category 3 "Systemic Event" (on a scale of 1–5), reflecting its deep impact on national industrial output.
Why the Cost Was So High
The attack, which began in late August 2025, wasn't just a data breach; it was a massive operational disruption that paralyzed the company's "just-in-time" manufacturing model.
Global Shutdown: JLR was forced to halt production for several weeks across its major UK plants (Solihull, Halewood, and Wolverhampton) and international sites.
Supply Chain Ripple Effect: Over 5,000 UK organizations in the automotive supply chain were affected.
Many smaller suppliers were forced to lay off staff or reduce pay as orders vanished overnight. GDP Impact: The Bank of England later noted that the production halt at JLR was a contributing factor to the slowdown in UK GDP growth for the third quarter of 2025.
Recovery Efforts
To stabilize the situation, the UK government approved a £1.5 billion loan guarantee in September 2025 to help JLR support its struggling suppliers and restart production.
Responsibility for the attack was claimed by a group calling itself "Scattered Lapsus$ Hunters," a collaboration of several notorious cybercrime entities.