Overview

• Production and retail systems remain disrupted, with Halewood staff stood down and outages reported across UK and overseas sites as the shutdown continues into a fourth day.
• JLR says it proactively took global IT offline to contain the incident and is restoring applications in stages with support from external cybersecurity specialists.
• Dealers and garages report they cannot register new cars or order parts, causing delivery and repair delays during the crucial '75' plate launch period.
• A coalition linked to Scattered Spider, Lapsus$ and ShinyHunters posted Telegram screenshots and claimed access, with reports of extortion attempts, though JLR has not verified these claims.
• The National Crime Agency says it is aware of the incident and is working with partners to understand the impact as investigators examine reports of an SAP NetWeaver exploit.