The fallout from the Jaguar Land Rover cyberattack continues. In a significant new development, the company has now confirmed that payroll-related data was accessed during the attack – raising serious concerns for both current and former employees.
This marks a shift from earlier updates, where the full nature of the stolen data remained unclear.
What data has now been confirmed as affected?
Jaguar Land Rover has told staff that the attackers gained unauthorised access to personal data used to manage employment, payroll and benefits. This includes information linked not only to current employees, but also to former staff whose records were still being held.
While Jaguar Land Rover has not published a full list of affected data fields, payroll and benefits systems typically contain highly sensitive information, such as bank details, national insurance numbers, tax information and home addresses.
Data linked to payroll and employment is especially valuable to criminals. Unlike passwords, it cannot easily be changed, and it can be used to commit long-term fraud.
That’s why Jaguar Land Rover has now warned employees and former staff that they may be at risk of identity fraud. Although there is currently no evidence the data has been misused or made public, the risk does not disappear simply because harm has not yet been detected. In many major cyber incidents, misuse only becomes visible months later.
What this means for affected employees
If you are a current or former Jaguar Land Rover employee, this development is important. Under UK data protection law, organisations have a duty to keep personal data secure. Where failures lead to exposure of sensitive information, affected individuals may have the right to seek compensation – including for distress, anxiety and the risk of future harm.
If you think you may be affected, you should take steps to protect yourself now.
It’s also important to stay informed. You can register your details with Join the Claim to receive updates as the situation develops and to find out whether a group claim is being explored by one of our trusted legal partners.
We’ll also continue to publish verified updates and plain-English explainers on our news page as more information emerges.
Join the Claim connects consumers with SRA-regulated lawyers. Visit the claim page to check your eligibility if a claim is open with one of our trusted legal partners. If a group action has not yet been launched, you can register your interest and we’ll keep you informed if a partner firm decides to take a claim forward.
