Overview

• Fresh forensic findings show that some information was accessed, and the company says it will notify individuals if their data is identified in the breach.
• Regulators have been informed and JLR is working with the UK’s National Cyber Security Centre, law enforcement and third‑party specialists to rebuild systems.
• Manufacturing at Solihull, Halewood and Wolverhampton remains suspended with many staff stood down until at least Monday, and service operations continue to face parts and diagnostics delays.
• Dealers are keeping showrooms open but have shifted to manual paperwork for registrations as core retail IT systems remain offline.
• A group calling itself Scattered Lapsus$ Hunters has claimed responsibility and shared alleged internal screenshots, though official attribution and the scope of stolen data have not been confirmed.