Jaguar Land Rover shuts down global systems after cyber incident

Published on September 3, 2025

Jaguar Land Rover shut down its systems after being impacted by a cyber incident, according to a notice posted on its media website Tuesday. 

“We are now working at pace to restart our global applications in a controlled manner,” the notice says. 

It adds that the company’s retail and production activities have been severely disrupted. 

Yet, there is no evidence that any customer data has been stolen, the notice says. 

Reuters reports that the disruption follows a July report that the company had delayed the launch of its electric Range Rover and Jaguar models for additional testing and until demand picks up. 

“The automaker is the latest British company to be hit by a cybersecurity incident in recent months amid a surge in cyber and ransomware attacks globally, as increasingly sophisticated threat actors disrupt operations and compromise sensitive data,” Reuters says. 

Last week, Farmers Insurance released a notice that more than 1 million Farmers Insurance customers had been exposed in a security breach of one of the insurer’s third-party vendors. 

BleepingComputer reports that it learned the data was stolen in a widespread Salesforce attack. Salesforce is a cloud-based software company that manages customer relationships, sales, and marketing information for other companies. 

ShinyHunters, which also works as Scattered Spider, is believed to be the hacking group involved in the Salesforce attack, according to Bleeping Computer. 

Scattered Spider was also suspected in the Erie Insurance hack that occurred in June. The group is known to continue attacks in the same industry. Hacks made against Aflac and Philadelphia Insurance Companies within weeks of Erie’s attack were also suspected to be Scattered Spider.

IMAGE

Photo courtesy of Marina113/iStock