Russia Investigated for Jaguar Land Rover Cyberattack That Halted UK, India, Brazil, Slovakia Production

Russia is being investigated as the possible culprit behind the cyber attack that crippled Jaguar Land Rover (JLR), according to reports first published by The Telegraph.

“Cyberwarfare / Nation-State Attacks,Fraud Management & Cybercrime,Governance & Risk Management Suggestions that Russian attackers disrupted British automotive giant Jaguar Land Rover raise the question of how the British government might respond, especially if it confirms Kremlin involvement”

BankInfoSecurity

The breach was detected on August 31 and forced JLR to halt production for more than a month, disrupting operations at its factories in the UK, India, Brazil and Slovakia.

BankInfoSecurity

The investigation is being led by the National Cyber Security Centre (NCSC), part of GCHQ, with support from the National Crime Agency, while teams of cybersecurity experts were deployed to restore operations and trace the source of the breach.

JLR said it had “proactively” shut down systems to contain the incident, and the UK government announced a £1.5bn loan guarantee to support JLR’s supply chain.

Business and Trade Secretary Peter Kyle described the cyber attack as “an assault on an iconic British brand,” and Chancellor Rachel Reeves called JLR “a jewel in the crown of our economy.”

A government spokesperson said, “The investigation is ongoing, and we would caution against speculation,” while the same report says the government has persistently called out a range of actors for malicious cyber activities against the UK.

Chancellor Rachel Reeves warned that “hostile states like Russia” were behind a number of cyber attacks targeting UK organisations, and Shadow Defence Secretary James Cartlidge said suspected Russian involvement, if confirmed, would be “very significant indeed”.

CarnetdeBord

Wired reported that the disruption had lasted “Da oltre tre settimane” and that the stop had “effetti a catena su centinaia di fornitori”.

Wired quoted Jamie MacColl, senior researcher at the Royal United Services Institute (Rusi), saying it was “un ordine di grandezza diverso rispetto agli incidenti precedenti”.

The FormulaPassion report said JLR had extended the production pause again, pushing the restart from 24 settembre to 1 ottobre to ensure a “ripresa in modo sicuro e protetto.”

The UK government’s £1.5bn loan guarantee was designed to help stabilise the company and protect jobs throughout its extensive network of suppliers, as production gradually resumed in recent weeks.

“Jaguar Land Rover ha annunciato un ulteriore prolungamento della pausa produttiva di un’altra settimana, in risposta all’attacco informatico subito all’inizio di settembre”

FormulaPassion

Wired said the pause had left “migliaia di dipendenti” at home and warned that unions and local politicians said “migliaia di posti di lavoro nella catena di approvvigionamento sono a rischio”.

FormulaPassion reported that the extended pause would mean “un intero mese di produzione” lost, and it cited Society of Motor Manufacturers and Traders (SMMT) estimating costs “fino a 5 milioni di sterline al giorno”.

The Manufacturer reported that JLR production was disrupted during the crucial 75-plate registration period, and it said JLR reported a 17% fall in global sales between July and September compared with the previous year.

Wired added that JLR is owned by Tata Motors and said the company has about 32.800 dipendenti diretti and supports other 104.000 jobs through the national supply chain, while the attack’s ripple effects threatened smaller suppliers.