{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-22T20:45:43.249Z",
  "tag": {
    "id": "manufacturing",
    "label": "Manufacturing",
    "isStack": false,
    "url": "https://pwn.watch/t/manufacturing",
    "feed": "https://pwn.watch/t/manufacturing/feed.xml"
  },
  "counts": {
    "incidents": 2,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 2
  },
  "incidents": [
    {
      "slug": "asahi-ransomware-qilin-september-2025",
      "title": "Asahi ransomware attack halts orders and beer shipments in Japan (Qilin claims it)",
      "url": "https://pwn.watch/i/asahi-ransomware-qilin-september-2025",
      "json": "https://pwn.watch/i/asahi-ransomware-qilin-september-2025.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "no-fix-needed",
      "product": "Asahi Group Holdings (Japan operations)",
      "tags": [
        "asahi",
        "qilin",
        "manufacturing",
        "ransomware"
      ],
      "cveIds": [],
      "affectedVersions": [
        "n/a"
      ],
      "fixedVersions": [],
      "startedAt": "2025-09-29",
      "closedAt": "2025-10-15",
      "updatedAt": "2025-10-15",
      "summary": "A ransomware attack on September 29, 2025 stopped Asahi Group's order processing, shipments and call centres in Japan and briefly halted its six Japanese beer plants. Asahi confirmed ransomware and possible data theft; Qilin claimed the attack and leaked files it said were stolen.",
      "xPost": null
    },
    {
      "slug": "jaguar-land-rover-cyberattack-production-shutdown-2025",
      "title": "Jaguar Land Rover cyberattack stops car production for five weeks",
      "url": "https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025",
      "json": "https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "no-fix-needed",
      "product": "Jaguar Land Rover (manufacturing IT)",
      "tags": [
        "jaguar-land-rover",
        "manufacturing",
        "ransomware"
      ],
      "cveIds": [],
      "affectedVersions": [
        "n/a"
      ],
      "fixedVersions": [],
      "startedAt": "2025-08-31",
      "closedAt": "2025-11-14",
      "updatedAt": "2025-11-14",
      "summary": "A cyberattack that began on August 31, 2025 forced JLR to shut down IT systems and halt production worldwide from September 1. A phased restart began October 8; UK production was back to normal by November 14. The UK government guaranteed a £1.5B loan to keep JLR's suppliers afloat.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "jaguar-land-rover-cyberattack-production-shutdown-2025",
      "incidentTitle": "Jaguar Land Rover cyberattack stops car production for five weeks",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-11-14",
      "title": "UK production returns to normal",
      "body": null,
      "sourceUrl": "https://www.reuters.com/business/retail-consumer/jaguar-land-rovers-uk-production-returns-normal-after-weeks-long-cyber-shutdown-2025-11-14/",
      "url": "https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025"
    },
    {
      "incident": "jaguar-land-rover-cyberattack-production-shutdown-2025",
      "incidentTitle": "Jaguar Land Rover cyberattack stops car production for five weeks",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-10-08",
      "title": "Phased manufacturing restart begins",
      "body": null,
      "sourceUrl": "https://www.jlr.com/news/2025/10/jlr-restarts-manufacturing-and-introduces-new-financing-solution-pay-jlr-suppliers",
      "url": "https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025"
    },
    {
      "incident": "asahi-ransomware-qilin-september-2025",
      "incidentTitle": "Asahi ransomware attack halts orders and beer shipments in Japan (Qilin claims it)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-10-07",
      "title": "Qilin claims responsibility and leaks data",
      "body": null,
      "sourceUrl": "https://www.bleepingcomputer.com/news/security/qilin-ransomware-claims-asahi-brewery-attack-leaks-data/",
      "url": "https://pwn.watch/i/asahi-ransomware-qilin-september-2025"
    },
    {
      "incident": "asahi-ransomware-qilin-september-2025",
      "incidentTitle": "Asahi ransomware attack halts orders and beer shipments in Japan (Qilin claims it)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-10-03",
      "title": "Asahi confirms ransomware and possible data exfiltration",
      "body": null,
      "sourceUrl": "https://www.asahigroup-holdings.com/en/newsroom/detail/20251003-0204.html",
      "url": "https://pwn.watch/i/asahi-ransomware-qilin-september-2025"
    },
    {
      "incident": "asahi-ransomware-qilin-september-2025",
      "incidentTitle": "Asahi ransomware attack halts orders and beer shipments in Japan (Qilin claims it)",
      "severity": "high",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-09-29",
      "title": "Cyberattack halts orders, shipments and call centres in Japan",
      "body": null,
      "sourceUrl": "https://www.bloomberg.com/news/articles/2025-09-29/cyberattack-disrupts-asahi-group-suspending-some-shipments",
      "url": "https://pwn.watch/i/asahi-ransomware-qilin-september-2025"
    },
    {
      "incident": "jaguar-land-rover-cyberattack-production-shutdown-2025",
      "incidentTitle": "Jaguar Land Rover cyberattack stops car production for five weeks",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-09-28",
      "title": "UK government guarantees a £1.5B loan to support JLR and suppliers",
      "body": null,
      "sourceUrl": "https://www.bbc.co.uk/news/articles/cgl15ykerlro",
      "url": "https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025"
    },
    {
      "incident": "jaguar-land-rover-cyberattack-production-shutdown-2025",
      "incidentTitle": "Jaguar Land Rover cyberattack stops car production for five weeks",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "no-fix-needed",
      "date": "2025-08-31",
      "title": "Cyberattack begins; production halted from September 1",
      "body": null,
      "sourceUrl": "https://www.reuters.com/business/retail-consumer/jaguar-land-rovers-uk-production-returns-normal-after-weeks-long-cyber-shutdown-2025-11-14/",
      "url": "https://pwn.watch/i/jaguar-land-rover-cyberattack-production-shutdown-2025"
    }
  ]
}
