Particle.news
Download on the App Store

JLR Halts UK Production After Cyberattack, Tells Factory Staff to Stay Home Until Tuesday

The company shut down core IT systems to contain the breach, with no evidence of customer data theft as regulators assess its report.

Overview

  • Production remains paused at sites in Solihull, Halewood, Wolverhampton and Castle Bromwich, with factory workers told to stay home until at least Tuesday, 9 September.
  • Retail and service tools are disrupted, leaving dealers unable to process some new '76' plate registrations, order or code parts, and complete vehicle handovers, causing delivery delays.
  • JLR says it proactively shut down systems and is rebuilding global applications in a controlled manner after confirming severe disruption to retail and production activities.
  • A collective using the names Scattered Spider, ShinyHunters and Lapsus$ — styling itself 'Scattered Lapsus$ Hunters' — claimed responsibility on Telegram and shared purported internal screenshots, though attribution remains unverified.
  • The ICO says JLR has reported the incident and is under assessment, the NCSC and NCA are providing support, and reports indicate extortion attempts with no independent confirmation of data theft.