Could You Be Affected by the Jaguar Land Rover Data Breach?

Jaguar Land Rover customers and staff may have been affected by the recent data breach. Register your interest to stay informed and receive updates if this claim is taken forward by one of our partner law firms.

Join the Claim isn’t a law firm. We connect you with regulated UK firms that run group action claims. If one of our partner firms takes this case forward, we’ll share more details, including how to check your eligibility.
Join the Claim Limited is a claims management company. This claim is not regulated by the Financial Conduct Authority. Join the Claim Limited is authorised and regulated by the FCA (FRN: 1053404) for regulated claims management activities only.

Quick & Simple

Register your interest

Stay Informed

Get justice

Overview

In early September 2025, the luxury car manufacturer Jaguar Land Rover (JLR) was hit by a major cyberattack. The incident was so significant that the company was forced to shut down its IT systems, causing “severe disruption” to its global production lines and retail operations.  

While JLR’s initial statement said there was “no evidence” that customer data had been stolen, the company later confirmed that some data had been affected” as a result of the attack.

The compromised information reportedly included data relating to current and former employees and contractors, including payroll and benefits information such as bank account details, national insurance numbers, tax codes and addresses.

The forensic investigation was still ongoing in late 2025, so the position could potentially change if further findings emerge.

Confirmation that data has been accessed means the risks for both customers and staff are very real.

Lawyers are now investigating a possible group action claim on behalf of those affected. If you are a JLR customer or employee and it turns out that your personal data has been compromised, you may be entitled to compensation.

We are monitoring the situation closely. Register your interest, and we’ll keep you updated if one of our regulated UK partner law firms is able to take this claim forward.

Jaguar Land Rover Data Breach – At a Glance

Status

Stay Informed

Impact

JLR admits some data was compromised.

What do we know about the Jaguar Land Rover data breach?

  • The attack, which began around  1 September, 2025, was timed to cause maximum damage during a key sales period. It forced JLR to halt production at its major Halewood and Solihull plants and severely impacted its ability to sell and register new cars, causing significant inconvenience for customers.  
  • On 10 September 2025, Jaguar Land Rover confirmed that data was stolen during the cyberattack.
  • Independent cybersecurity experts have advised JLR customers and employees to be on “high alert” for targeted phishing scams.  
  • Under UK data protection laws, if it is discovered that personal data has been compromised, you may be entitled to compensation – not only for the loss of your data, but also for the significant inconvenience and emotional distress caused by the company’s failure to protect its systems.

How Join the Claim works

Quick survey

Take a moment to answer a few simple questions so we can understand your connection and keep you updated.

Register interest

Share your details so we can keep you informed if any updates become available.

Join a claim

If a partner law firm takes this claim forward, we’ll let you know the next steps and how to join.

Latest updates on the Jaguar Land Rover data breach

  • December 2025

    JLR confirmed that payroll and employment-related data had been accessed during the cyber attack.

    The compromised information reportedly included data relating to current and former employees and contractors, including payroll and benefits information such as bank account details, national insurance numbers, tax codes and addresses.

    JLR warned affected individuals that they could face an increased risk of identity fraud and confirmed it was offering two years of credit and identity monitoring services.

    JLR confirmed the incident had been reported to the Information Commissioner’s Office while forensic investigations into the breach continued.

  • October 2025

    Experts at the Cyber Monitoring Centre (CMC) release a report stating that the Jaguar Land Rover attack cost an estimated £1.9bn and could be the most economically damaging cyber event in UK history. 

  • 10 September 2025

    JLR confirmed for the first time that data was stolen during the cyberattack.

    The company did not specify what type of data was accessed, how much information may have been stolen or whether any of its 30,000 employees were among those affected. 

    JLR added that it will “contact anyone as appropriate if we find that their data has been impacted.”

  • Early September 2025

    JLR is impacted by a major cyber incident. In a statement, the car maufacturer says "At this stage there is no evidence any customer data has been stolen."

    Cyber experts warn customers to be vigilant as the situation develops.

    Join the Claim opens registration and makes it easy for people to check whether they are eligible should a data breach claim arise.

We’ll provide more updates as they occur.   

Join the claim
Join the claim
Join the claim

Who could be affected by the Jaguar Land Rover data breach?​

Customers and staff may have been affected by the recent Jaguar Land Rover data breach.
Register to stay updated and we’ll let you know if a partner law firm takes this claim forward.

Frequently asked questions about the Jaguar Land Rover data breach claim

In early September 2025, JLR was targeted by a cyberattack that severely disrupted its global operations. To contain the attack, the company shut down its IT systems, which halted vehicle production and prevented dealerships from selling and registering new cars. 

On 10 September 2025, Jaguar Land Rover confirmed for the first time that data was stolen during the cyberattack.

The compromised information reportedly included data relating to current and former employees and contractors, including payroll and benefits information such as bank account details, national insurance numbers, tax codes and addresses.

If a claim is successful, compensation is typically awarded to reflect the impact of the incident on you. This can include any financial losses, as well as compensation for the emotional distress, anxiety, and time spent dealing with the consequences of the incident.

Possibly. Cybercriminals often exploit the confusion around such high-profile incidents. Be extremely cautious of any unexpected emails, texts, or calls claiming to be from JLR, your bank, or a law firm. Never click on suspicious links or provide personal information.

Yes. Earlier in 2025, JLR was impacted by a different data breach that saw the theft of sensitive company documents and employee data. This history raises questions about the robustness of the company’s security measures.

Not at this stage. If documentation is needed later (for example, to help calculate losses), you’ll be guided on what to provide.

No. Registering simply means you’ll receive updates. If a law firm later takes on the case, you’ll be given the option to learn more about the process and any potential costs before deciding whether to take part. 

A group action claim allows people affected by the same issue to take action together. This strength in numbers helps stand up to big organisations. Join the Claim helps connect people with law firms so these actions have a real impact.

We are not a law firm. Our role is to keep people informed about potential group actions if one of our regulated UK partner law firms is able to take this claim forward.  

Rated Excellent


on REVIEWS.io

Rated Excellent on REVIEWS.io

Join the claim
Clifford
Very easy to sign up, hope its sorted soon
Susan
Very easy and quick to complete the claim Everything was explained well and fees payable in etc were made very clear
Peter
So easy to sign up for the claim

Latest news