On 10 September 2025, Jaguar Land Rover (JLR) confirmed for the first time that data was stolen during the cyberattack that forced the company to shut down systems and halt production earlier this month.
What JLR has said so far
In its latest statement, JLR admitted that “some data has been affected” as a result of the attack. The company did not specify:
- What type of data was accessed
- How much information may have been stolen
- Whether any of its 30,000 employees are among those affected.
JLR added that its forensic investigation “continues at pace” and that it will “contact anyone as appropriate if we find that their data has been impacted.”
Why this update matters
Until now, JLR had maintained there was “no evidence” that customer or employee data had been stolen. That position has now changed. Confirmation that data has in fact been taken means the risks for customers and staff are real, even if the full scale is not yet known.
This shift is important because stolen data can lead to a range of harms, from targeted phishing emails to identity theft. It also raises serious questions about JLR’s handling of security — particularly as this is the second major data-related incident the company has suffered in 2025.
What it could mean for customers and employees
Cybersecurity experts warn that breaches of this scale can have serious consequences for anyone whose data has been affected. The full impact often isn’t known for weeks or even months. Key risks include:
- Delayed fallout: Stolen data may not appear immediately, but can surface later on criminal forums.
- Phishing and scams: Both customers and employees may be targeted with convincing scam emails, texts or calls designed to steal further details.
- Identity theft: If sensitive information such as addresses, payroll records or financial details are exposed, criminals could use them to commit fraud.
- Knock-on risks: Even if only employee data is confirmed as stolen, attackers may try to exploit this to reach customers, for example by impersonating staff in emails or calls.
A data breach can leave you exposed to scams, ID fraud, and credit damage. But you’re not powerless. Our handy guide explores what you can do right now to protect yourself.
What you should do now
The investigation is ongoing, but JLR customers and employees should take sensible precautions:
- Be alert to phishing emails or texts that claim to come from JLR.
- Don’t click on suspicious links or hand over personal details.
- Check with Join the Claim to see whether you may be eligible for compensation if a group action follows.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
