Particle.news

Download on the App Store

JLR Cyberattack Halts UK Plants and Sales Systems, With Shutdowns Extending Into Next Week

Production remains paused into next week during a phased IT recovery.

Overview

  • Factory staff at Halewood, Solihull and Wolverhampton have been told not to return until at least Tuesday 9 September as operations stay suspended.
  • Dealers were unable to register new cars on 1 September’s launch of the new number plate, and garages report diagnostics and parts ordering systems are still down, delaying repairs and deliveries.
  • A Telegram channel linked to Scattered Spider, ShinyHunters and Lapsus$ posted screenshots and claimed responsibility, with the BBC reporting an attempt to extort JLR, though the claims remain unverified.
  • JLR says there is currently no evidence that customer data has been stolen, and it has notified the ICO and is working with the NCA as investigations continue.
  • Some analysts point to possible exploitation of SAP NetWeaver flaws based on shared screenshots, but JLR has not confirmed any technical details as it restores applications in phases.