UPDATE: On 10 September 2025, Jaguar Land Rover (JLR) confirmed for the first time that data was stolen during the cyberattack that forced the company to shut down systems and halt production earlier this month.
In September 2025, Jaguar Land Rover (JLR) was forced to shut down its IT systems after a major cyberattack. The disruption was huge – halting production lines and leaving dealerships unable to register new cars. While JLR has said there’s “no evidence” customer data was stolen, that doesn’t mean drivers are out of the woods.
Why the risks don’t end when the headlines fade
When big brands are hit by cyberattacks, it often takes months before the full scale of the problem is clear. Stolen data can sit hidden on criminal forums before being sold on or used in scams. That means even if JLR hasn’t found evidence yet, customers could still face risks in the months to come.
The hidden dangers for customers
Experts warn that cyberattacks like this can have knock-on effects for ordinary people – even if no data has officially been confirmed as stolen.
Criminals often exploit the confusion that follows a major incident, using it as an opportunity to trick customers into handing over sensitive information. Some of the main risks include:
- Phishing and scams: Attackers may send convincing fake messages that appear to come from JLR, playing on customer concerns after the cyberattack.
- Identity theft: If sensitive information is exposed, fraudsters can use it to take out credit or loans in someone else’s name.
- Erosion of trust: Customers place their confidence in major brands to protect their personal details. When that trust is shaken by a cyberattack, it can cause lasting worry about whether their information is truly safe.
We’ve put together a practical guide to help you stay safe. From spotting fraud to securing your accounts, it explains the steps you can take right now to protect your personal information.
What you can do right now
The full impact of the JLR cyberattack is still being investigated, so the best step for customers is to stay informed. By registering your details with Join the Claim, you’ll be the first to know if evidence of a data breach emerges and whether you could be eligible for compensation.
It’s also worth keeping an eye on our news page, where we’ll share the latest updates on the case as it develops. That way, you won’t miss any important changes.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.