IT attack: Jaguar Land Rover still unable to resume production

Following an IT incident at the end of August, Jaguar Land Rover had originally planned to restart production this week. However, this has now come to nothing.

listen Print view
Jaguar and Land Rover signs in front of a car dealership

(Image: dvoevnore/Shutterstock.com)

2 min. read

British car manufacturer Jaguar Land Rover (JLR) is still unable to resume production almost a month after an IT incident, which is now scheduled for 1 October. The plants were due to restart on 24 September, but the company needs more time to gradually restart operations and conduct internal investigations, according to a statement.

The BBC adds that the weeks-long interruption to production is becoming a growing problem for suppliers, and there is an increasing risk that some will not be able to cope financially with the consequences. An economic expert has already told the news channel that JLR itself has already lost the equivalent of 140 million in profits and almost two billion euros in turnover.

JLR publicised the “cyber incident” at the beginning of September and explained that its systems had been “proactively shut down.” It initially stated that there was no evidence that customer data had been stolen, “but our sales and production were significantly disrupted.” Days later, the car manufacturer, which is part of the Indian Tata Group, stated that “some data” may have been affected and that the authorities had been informed. JLR now assures that it is aware of the difficulties caused by the ongoing production disruption and is focusing on supporting its customers, suppliers, and sales outlets. According to the BBC, more and more calls for help are coming from there, and in some cases, employees can no longer be paid.

Videos by heise

The Scattered Lapsus$ Hunters gang claimed responsibility for the IT attack as soon as it became known and published screenshots as proof that JLR was being blackmailed. The group wants to give the impression that it is made up of scattered members of three criminal groups, which mainly consisted of young Britons. These include Scattered Spider, which attacked retailers M&S (Marks & Spencer), Co-op, and Harrods in April and May. Lapsus$, on the other hand, has been known for years and has attacked Rockstar Games, the Brazilian Ministry of Health, Nvidia, Samsung, Ubisoft, T-Mobile, Microsoft, Uber, and British Telecom. Both groups have mainly used social engineering to infiltrate company networks.

(mho)

Don't miss any news – follow us on Facebook, LinkedIn or Mastodon.

This article was originally published in German. It was translated with technical assistance and editorially reviewed before publication.