Jaguar Land Rover Hack Inflicts $2.5 Billion Blow to UK Economy, Report Finds

The cyberattack on Jaguar Land Rover (JLR), owned by India’s Tata Motors (TAMO.NS), has cost the UK economy an estimated £1.9 billion ($2.55 billion) and disrupted more than 5,000 organisations, according to a report published Wednesday by the Cyber Monitoring Centre (CMC).

The CMC, an independent body comprising cybersecurity experts including the former head of Britain’s National Cyber Security Centre, described the August attack as “the most economically damaging cyber event to hit the UK.” Most of the financial fallout, it said, stems from lost manufacturing output across JLR and its suppliers.

JLR was forced to halt production for nearly six weeks, affecting its three UK plants that together produce around 1,000 vehicles per day. The company began resuming operations earlier this month, but analysts estimated losses at roughly £50 million per week during the shutdown.

The British government extended a £1.5 billion loan guarantee in September to help JLR stabilize its supply chain and support affected partners. The CMC warned that total losses could climb higher if production takes longer than expected to return to normal levels.

“This incident highlights the scale of vulnerability in interconnected supply chains,” the CMC said, noting that the breach disrupted not only JLR’s assembly lines but also dealerships and logistics providers.

The attack was classified as a Category 3 systemic event — the third-highest severity level on the CMC’s five-tier scale — due to its widespread economic ripple effects.

The report also placed the incident among a series of major British cyber breaches in 2025, including one at Marks & Spencer (MKS.L) in April that caused an estimated £300 million ($400 million) in losses after shutting down its online platform for two months.

JLR declined to comment on the findings but is expected to release its financial results in November. The CMC report, which is funded by the insurance industry, said the event underscores the growing systemic risk cyberattacks pose to the UK’s industrial and economic stability.