# Jaguar Land Rover cyberattack stops car production for five weeks · pwn.watch

> A cyberattack that began on August 31, 2025 forced JLR to shut down IT systems and halt production worldwide from September 1. A phased restart began October 8; UK production was back to normal by November 14. The UK government guaranteed a £1.5B loan to keep JLR's suppliers afloat.

Page: https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025 · generated 2026-10-23T00:16:28.879Z

## Status
- Severity: critical · status: closed · patch: no-fix-needed
- Product: Jaguar Land Rover (manufacturing IT)
- Started: 2025-08-31 · closed: 2025-11-14
- Affected: n/a

## Follow this incident
- RSS (one item per update): https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025/feed.xml
- JSON Feed: https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025/feed.json
- Full data (timeline, sources, posts, agentBrief): https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025.json
- This file: https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025/llms.txt

## Updates (newest first)
- 2025-11-14: UK production returns to normal (https://www.reuters.com/business/retail-consumer/jaguar-land-rovers-uk-production-returns-normal-after-weeks-long-cyber-shutdown-2025-11-14/)
- 2025-10-08: Phased manufacturing restart begins (https://www.jlr.com/news/2025/10/jlr-restarts-manufacturing-and-introduces-new-financing-solution-pay-jlr-suppliers)
- 2025-09-28: UK government guarantees a £1.5B loan to support JLR and suppliers (https://www.bbc.co.uk/news/articles/cgl15ykerlro)
- 2025-08-31: Cyberattack begins; production halted from September 1 (https://www.reuters.com/business/retail-consumer/jaguar-land-rovers-uk-production-returns-normal-after-weeks-long-cyber-shutdown-2025-11-14/)

## Fix brief
# Security brief: Jaguar Land Rover cyberattack stops car production for five weeks

Source: https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025 · status: closed (closed Nov 14, 2025) · severity: critical · updated Nov 14, 2025

## Patch status
**NO FIX NEEDED: no action on your side beyond verification.**

## What it is
A cyberattack that began on August 31, 2025 forced JLR to shut down IT systems and halt production worldwide from September 1. A phased restart began October 8; UK production was back to normal by November 14. The UK government guaranteed a £1.5B loan to keep JLR's suppliers afloat.

Severity detail: Weeks-long production shutdown; government loan guarantee

- Product: Jaguar Land Rover (manufacturing IT)

## Affected versions
- n/a

## Check whether you're affected
No generic command applies (the product is a hosted service, appliance or desktop app). Check the installed version in its admin UI / About screen and compare with the versions above.

## Fix
No fixed version is listed. Follow the vendor advisory below.

## Latest updates
- Nov 14, 2025: UK production returns to normal
- Oct 8, 2025: Phased manufacturing restart begins
- Sep 28, 2025: UK government guarantees a £1.5B loan to support JLR and suppliers
- Aug 31, 2025: Cyberattack begins; production halted from September 1

## Write-ups & news
- [JLR restarts manufacturing and introduces new financing solution to pay JLR suppliers early](https://www.jlr.com/news/2025/10/jlr-restarts-manufacturing-and-introduces-new-financing-solution-pay-jlr-suppliers)
- [Government to guarantee £1.5bn Jaguar Land Rover loan after cyber shutdown](https://www.bbc.co.uk/news/articles/cgl15ykerlro)
- [Tata Motors-owned JLR begins phased manufacturing restart post cyber attack](https://www.reuters.com/en/tata-motors-jlr-return-manufacturing-after-cyber-attack-2025-09-29/)
- [Jaguar Land Rover's UK production returns to normal after weeks-long cyber shutdown](https://www.reuters.com/business/retail-consumer/jaguar-land-rovers-uk-production-returns-normal-after-weeks-long-cyber-shutdown-2025-11-14/)

## Caveats
Loan guarantee date (Sep 28) from memory; verify on the BBC article.

---
Machine-readable: https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025.json · all incidents: https://pwn.watch/incidents.json. Verify against the vendor advisory before changing production systems.