UPDATE: On 10 September 2025, Jaguar Land Rover (JLR) confirmed for the first time that data was stolen during the cyberattack that forced the company to shut down systems and halt production earlier this month.
Jaguar Land Rover (JLR) is one of the UK’s biggest car brands – but 2025 has been a tough year for its IT security. A cyberattack in September forced the company to halt production and shut down systems worldwide. And it wasn’t the first incident this year.
JLR’s responsibility under UK law
Big companies like JLR are legally required to protect customer and employee data under the UK’s data protection rules. This includes keeping IT systems secure, reporting incidents quickly, and ensuring personal information isn’t exposed to unnecessary risk.
However, in early September 2025, the luxury car manufacturer was hit by a major cyberattack. While JLR’s initial statement said there was “no evidence” that customer data had been stolen, the full impact of this security failure remains unclear.
Who was behind the September cyberattack?
Soon after the September cyberattack, responsibility was claimed on a Telegram channel linked to three notorious English-speaking hacker groups: Scattered Spider, Lapsus$ and ShinyHunters. The channel posted what appeared to be a screenshot of JLR’s internal IT systems, alongside a news article about the attack.
Scattered Spider, in particular, has built a reputation for targeting major UK retailers. This year alone, the group has been linked to attacks on Marks & Spencer, the Co-op and Harrods. In July, UK police arrested four people – including three teenagers – as part of their investigation into the retail cyberattacks.
JLR’s earlier data breach in 2025
The September attack wasn’t the first time JLR faced a major security incident this year. Back in March 2025, the Hellcat ransomware group claimed responsibility for hacking JLR and leaking around 350GB of sensitive data. According to cybersecurity experts, the stolen files included proprietary documents, source code, and employee details.
Why customers are concerned
For many JLR customers, the fact that multiple serious security violations have occurred in the same year is concerning. Some of the main concerns include:
- Repeated incidents: With at least two major security breaches in 2025, JLR’s ability to safeguard information is under serious scrutiny.
- Severe disruption: The September attack halted production and stopped dealerships from registering new cars, showing how vulnerable the company’s systems can be.
- Future risks: Even though JLR says there’s “no evidence” of data theft in the September incident, experts warn that stolen details often surface months later.
- Risk of scams: Even if no data has been stolen in the latest cyber incident, hackers may try to take advantage of the situation, so vigilance is needed now.
Whether it’s a leaked email address, stolen passwords, or worse, a data breach can leave you exposed to scams, ID fraud, and credit damage. But you’re not powerless. Our handy guide explores what you can do right now to protect yourself and hold the offending organisation accountable.
Holding big brands to account
When household names fail to meet their responsibilities, it’s customers who are left exposed. That’s why group claims exist – to give ordinary people the chance to stand up to global corporations and demand better protection.
The investigation into JLR’s cyberattack is still ongoing. If you’re a Jaguar or Land Rover customer, the best way to protect your position is to stay informed. By registering with Join the Claim, you’ll receive updates on the case and be notified straight away if a group claim is launched by a UK law firm.
You can also follow our news page for the latest developments – from legal analysis to expert advice on how incidents like this may affect customers in the long run.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
