16+

JLR resumes production worldwide after six-week cyberattack

© A. Krivonosov
Jaguar Land Rover has restarted all plants after a six-week cyberattack. Halewood was last to return. JLR faces weeks to restore output after £1.5bn losses.
Michael Powers, Editor

Jaguar Land Rover (JLR) has officially resumed production at all of its plants worldwide, drawing a line under a six-week crisis triggered by a major cyberattack that began on September 1 and crippled the company’s systems.

The last site to return was Halewood in the UK, where the Range Rover Evoque and Land Rover Discovery Sport are built. That restart capped a phased recovery during which JLR checked the integrity of its IT infrastructure and supply chains.

According to SPEEDME.RU, production lines were brought back in stages—powertrain and component operations first, followed by assembly for key models: the Range Rover, Range Rover Sport, and Defender. Downtime losses are estimated at £50 million per week, putting the total impact of the attack at about £1.5 billion.

Responsibility was claimed by the hacker group Scattered Lapsus$ Hunters, which said it exploited a vulnerability in SAP NetWeaver to gain access to customer data.

Although all plants are running again, analysts expect several weeks will be needed to restore full output. JLR now faces the task of clearing a backlog of deliveries and reconnecting with customers affected by the disruption. For investors and partners, seeing the lines move again is a clear signal of renewed stability—and a pointed reminder of how costly downtime can be in modern carmaking.