October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsClean PCRecommendedOne scan can reveal what keeps slowing WindowsLook for cleanup and repair opportunities.Run ScanOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
CarCodyAdvertise
Service recordThe Garage

Jaguar Land Rover’s 2025 Cyber Incident: Why Production Was Shut Down and Extended

Jaguar Land Rover’s September 2025 production shutdown was extended twice after a cyber incident. Here is the verified timeline, operational impact, government support and phased restart.
Entry845 Date Time8 min MechanicCarCody Team

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Jaguar Land Rover extended its production pause on September 16, 2025, keeping factories offline until at least September 24 while it investigated a cyber incident and prepared a controlled restart. That was not the final delay: on September 23, JLR extended the pause again, this time until October 1. Manufacturing then began returning in phases from October 8.

The episode disrupted JLR’s production, retail activity, supplier payments and wider automotive supply chain. However, the public record does not establish who carried out the incident, how the attackers entered JLR’s systems, whether it was ransomware, or the final scope of any data theft.

As an Amazon Associate I earn from qualifying purchases.

What the September 16 announcement meant

JLR’s September 16 decision was an extension of a production shutdown that began after the company disclosed a cyber incident on September 2. JLR said it had proactively taken systems offline to mitigate the incident, severely disrupting production and retail operations.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

At the September 16 news point, the company said it needed at least another week to assess the different stages of a controlled restart. Its forensic investigation was still under way, so the extension should not be read as a statement that a new attack had occurred or that every JLR operation was completely offline. It meant that the company was not yet ready to restore manufacturing on a normal schedule.

#1 Best Overall
Car Alarm System with Motion Sensor, 108dB Anti-Theft Alarm Wireless Remote
  • 【2-Pack Double Protection】: Each set includes 2 car alarm units + 1 wireless remote, so you can secure two vehicles at once, or place one on the front and one on the rear of a single car. The remote can pair with multiple hosts - great for couples, families, or a car + motorcycle combo
  • 【Smart 3D Motion Sensor, Fewer False Alarms】: Built-in 3D acceleration sensor with AI algorithm detects vibration, prying and forced entry, while intelligently filtering out noise from passing cars, rain or thunder - high sensitivity without the constant false alarms that cheap alarms cause
  • 【108dB Siren + Red Warning Light】: First vibration triggers a short beep with red flashing as a warning; a second sets off a 30-second loud 108dB siren with strobe-like flashing that scares off thieves. 3 volume levels (108/102/96dB) suit neighborhoods, lots or busy streets
  • 【Magnetic Mount, No Drilling】: A strong magnet holds the alarm in place - no tools, no wiring, no sticky residue, and you can move it between cars anytime. The anti-UV PC housing resists high heat and cold, so it stays stable even in a car parked under the summer sun
  • 【66ft Wireless Remote & Long Battery】: Arm, disarm or locate your vehicle from up to 66ft (20m) away. Powered by 2 AAA batteries, the unit runs 6+ months and the remote lasts up to 2 years. Also works for home doors, bikes, ebikes, luggage - multi-scene security

JLR’s wording was important: it referred to a cyber incident, while much of the subsequent reporting used “cyberattack.” The reviewed official material did not confirm ransomware, an attacker identity or a specific intrusion method.

The shutdown timeline

Date What happened
September 2, 2025 JLR disclosed the cyber incident, said it had proactively shut down systems and reported severe disruption to production and retail activity. It said there was no evidence at that point that customer data had been stolen.
September 16 JLR extended its production pause until at least September 24 while it investigated the incident and planned a controlled restart.
September 19 The UK Department for Business and Trade and the Society of Motor Manufacturers and Traders said the incident was having a significant effect on JLR and the wider automotive supply chain. Officials met suppliers about cash-flow and operational problems.
September 23 JLR extended the pause again, keeping production stopped until Wednesday, October 1, to provide clarity while it developed a phased-restart timetable.
September 28 The UK government announced a UK Export Finance guarantee expected to unlock up to £1.5 billion in commercial borrowing for JLR and its supply chain.
September 29 JLR said some manufacturing sections would resume in the coming days, but emphasized that recovery would be controlled and phased, with support from cybersecurity specialists, the UK National Cyber Security Centre and law enforcement.
October 7 JLR outlined the next stage of the restart and said manufacturing would begin returning on October 8 at engine and battery facilities, followed by stamping, Solihull, Nitra and other operations.
October 8 onward Manufacturing began returning in stages rather than restarting everywhere simultaneously.

The September 16 headline therefore describes one stage of a longer recovery. The September 23 extension to October 1 was the later production-pause date, and the October announcements described the gradual return of operations.

Which JLR operations were affected?

The initial disruption covered both manufacturing and retail activities. Public reporting and company information identified major UK facilities including:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Solihull, where vehicle manufacturing was affected;
  • Halewood, another vehicle-production site; and
  • Wolverhampton, associated with engine manufacturing.

The disruption also reached JLR’s wider global operations. That does not mean every plant, system or market was continuously offline for the same period. JLR’s later restart plan specifically showed a staged sequence across different types of operations and locations.

In its October 7 update, JLR said the Electric Propulsion Manufacturing Centre and Battery Assembly Centre in the West Midlands would be among the first facilities to restart. UK stamping operations and Solihull vehicle-manufacturing activity were to follow, alongside vehicle production in Nitra, Slovakia, and other facilities.

Rank #2
CARLOCK Anti Theft Car Device - Real Time 4G Car Tracker & Car Alarm System. Comes with Device & Phone App. Tracks Your Car in Real Time & Notifies You Immediately of Suspicious Behavior.OBD Plug&Play
  • WORK & SLEEP WITHOUT WORRY - CarLock anti theft car device and car alarm monitors and alerts you on your phone when your vehicle is moved, when the engine starts, if unusual vibration is detected & even if the device is disconnected!
  • MONITOR YOUR TEENAGER - We love our teens but they can be entirely different people behind the wheel. Car Lock car safety device detects harsh acceleration (drag racing), hard breaking & sharp cornering (stunt driving).
  • VIRTUAL MECHANIC - CarLock actively monitors the health of your vehicle and alerts you in advance if your car battery is running dangerously low or is experiencing high battery drain.
  • LIKE GPS ON STEROIDS - Car Lock GPS tracker and car alarm includes detailed trip tracking which lets you monitor where your car has been. Whether your car is stolen or a "trusted" driver is going off course - you'll know!
  • EXTREMELY AFFORDABLE - CarLock antitheft GPS vehicle tracker uses cloud computing, internet storage, GPS tracking and a modern day app (Android & iOS). You get all this for only $9.95 per month and the first month is FREE!

Why a manufacturing cyber incident spread beyond the factories

Modern vehicle manufacturing depends on interconnected systems rather than a single production-line computer. Manufacturing-control systems, parts ordering, logistics, dealer and retail platforms, finance systems and supplier payments all have to work together. Taking systems offline can therefore be a containment measure, but it can also prevent a manufacturer from safely coordinating production.

That helps explain why JLR’s problem became a supply-chain problem. A factory pause affects component orders, transport schedules, shift planning, dealer deliveries and the cash flow of companies that may depend on regular JLR production. The UK government and the SMMT said suppliers were reporting operational and financial pressure during the halt.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

JLR said on October 7 that it had re-established automated supplier-payment systems and was introducing accelerated supplier financing. Those measures addressed a practical consequence of the incident: suppliers needed to keep operating and paying their own staff and vendors while JLR’s normal production and payment processes were being restored.

What the £1.5 billion UK support package was—and was not

On September 28, the UK government announced a UK Export Finance guarantee expected to unlock up to £1.5 billion in commercial borrowing. The financing was described as repayable over five years.

The stated purpose was to give JLR’s supply chain greater certainty and bolster the company’s cash reserves after the cyberattack-related shutdown. It was a government-backed guarantee supporting commercial borrowing—not a direct £1.5 billion grant and not evidence that the government had simply paid JLR’s losses.

Rank #3
BANVIE Car Alarm System Security Antitheft with Keyless Entry Kit
  • 【Universal design】This car alarm system could fit for most of DC 12V cars(except old petrol cars). The remote controller has a zinc alloy frame, all buttons have good resilience.
  • 【Keyless entry】This antitheft alarm systems have all basic keyless entry functions, such as lock/unlock, car finding, trurnk release, light flash, power window(original close model required), etc.
  • 【Antitheft alarm】There is a 110dB siren with 6 tons for this car alarm, Alarming could be triggered by shock sensor & microwave sensor alarm and side door opening. Silent car alarm model could aslo be set.
  • 【Engine blocking】This car alarm contains an engine cut-off relay. In arm status, it can cut off engine power and make engine fail to start. In running, it can cut off power to come with Anti-hijacking function.
  • 【Central door locking automation】Car door will auto-lock after driving, and unlock after key turned to ACC OFF, So it will very safe for children in car. this function could be set ON or OFF(factory default is ON).

The intervention reflected the scale of the operational risk. A prolonged shutdown at a major vehicle manufacturer can threaten otherwise viable suppliers because their costs continue even when production revenue stops. A later parliamentary statement said JLR supported approximately 34,000 direct UK jobs and a further 120,000 jobs in its supply chain. Those are government-stated employment estimates, not an independently verified count of every worker affected by the incident.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Estimated economic impact

Later economic reporting connected the disruption with weaker UK third-quarter performance. Based on official statistics, September industrial output fell by 2%, while car and trailer manufacturing fell 28.6% month over month. Those national figures reflect several economic factors and should not be attributed entirely to JLR’s incident.

The Cyber Monitoring Centre was later reported to have estimated combined fixed-cost and lost-profit effects of approximately £108 million per week across the affected manufacturing ecosystem. That figure is a modeled estimate of the wider ecosystem’s impact, not a loss figure disclosed by JLR and not a confirmed measure of the company’s own weekly losses.

What is confirmed—and what is not

Confirmed by the public record

  • JLR disclosed a cyber incident on September 2, 2025.
  • The company proactively shut down systems to mitigate the incident.
  • Production and retail activities were severely disrupted.
  • JLR repeatedly extended its production pause, first to at least September 24 and then to October 1.
  • The recovery was planned and executed as a controlled, phased restart.
  • JLR worked with cybersecurity specialists, the UK National Cyber Security Centre and law enforcement during the recovery.
  • Supplier-payment systems were re-established and accelerated supplier financing was introduced.
  • The UK government supported JLR with a UK Export Finance guarantee expected to unlock up to £1.5 billion in commercial borrowing.
  • Manufacturing began returning in stages from October 8.

Still unconfirmed in the reviewed official material

  • The attacker: JLR, the NCSC and the UK government did not publicly identify the responsible group.
  • The entry point: No definitive public account established how the attackers gained access.
  • Ransomware: Media and online reports may have described the event in ransomware terms, but the reviewed authoritative material did not confirm that classification.
  • Data theft: JLR said on September 2 that it had no evidence at that point that customer data had been stolen. Later claims suggested that some data might have been taken, but the reviewed official statements did not establish a final scope of exfiltration.

Those distinctions matter. A named criminal group, a ransomware label or a claim about stolen data should not be presented as settled fact unless JLR or another authoritative source subsequently confirms it.

Why the restart had to be phased

A phased restart allows a company to validate systems and processes before reconnecting the full production network. In JLR’s case, that meant bringing different facilities and functions back in a sequence rather than switching every operation on at once.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Sale
Volam 4G LTE Cellular Dash Cam with Live Streaming & GPS Tracking - Dual Car Security Camera with Remote Live View,Cloud Storage,AI Motion Detection,Sentry Mode, Anti-Theft Protection for Vandalism
  • [4G LTE CELLULAR CONNECTIVITY & LIVE STREAMING FROM ANYWHERE] Stay connected to your vehicle 24/7 with our advanced 4G LTE dash cam featuring real-time remote live streaming. Unlike traditional WiFi dash cams, this cellular dash cam lets you check live video footage from your smartphone anywhere with 4G coverage. Perfect for monitoring parked cars, tracking teen drivers, or ensuring fleet security. Requires SIM card with data plan .
  • [AI MOTION DETECTION & INTELLIGENT SENTRY MODE] Protect your vehicle with cutting-edge AI technology that distinguishes between genuine threats and false alarms. The smart sentry mode automatically activates when your car is parked, instantly sending push notifications to your phone when motion is detected near your vehicle. This car security camera system provides peace of mind against vandalism, theft, and hit-and-runs. Adjustable sensitivity levels ensure you only get alerts that matter.
  • [CRYSTAL CLEAR 1080P DUAL CAMERA WITH CLOUD STORAGE] Capture every detail with dual 1080P HD cameras recording front and interior views simultaneously. The in-car camera can rotate 180° ,Wide-angle lenses ensure comprehensive coverage of road incidents and in-cabin activities. Secure cloud storage automatically backs up critical footage, ensuring evidence is never lost even if the camera is damaged or stolen.
  • [REAL-TIME GPS TRACKING & ADVANCED ANTI-THEFT PROTECTION] Never lose track of your vehicle with built-in GPS tracking. View your car's exact location in real-time through the mobile app, review trip history, and monitor driving routes. Anti-theft features include instant alerts when unauthorized movement is detected and automatic video recording upon intrusion.Ideal for theft recovery, fleet management, and ensuring loved ones' safety on the road.
  • [EASY OBD-II INSTALLATION & 24/7 PARKING MONITORING] Simple plug-and-play setup via OBD-II port—no complicated hardwiring required. The OBD power supply enables true 24/7 parking monitoring without draining your car battery, with intelligent voltage protection that automatically shuts off if battery voltage drops too low. ensuring your "Sentry Mode" is always activeCompatible with most vehicles manufactured after 1996,the discreet design won't obstruct your view while driving.

The October 7 plan began with engine and battery manufacturing, including the Electric Propulsion Manufacturing Centre and Battery Assembly Centre, then moved through stamping and vehicle manufacturing in Solihull and Nitra. Re-establishing automated supplier payments was another part of making the wider operation viable again.

This approach can extend the period before normal output returns, but it reduces the risk of restoring compromised or unverified systems too quickly. The public information does not provide a final date on which every affected JLR operation returned to normal, so the October restart should be described as the beginning of recovery rather than the end of the incident.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

What this story does not establish

The September 16 extension does not establish that JLR’s entire global manufacturing network was continuously offline. It describes a production pause during an investigation and recovery process, with facilities returning at different times.

It also does not establish that customer vehicles were unsafe, that every JLR dealer was closed, or that all customer information had been stolen. The documented impact was primarily operational: production, retail activity, business systems, supplier coordination and payments were significantly disrupted.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For readers encountering the headline after the event, the key date distinction is simple: September 16 was the announcement of an extension to at least September 24; September 23 brought a further extension to October 1; and October 8 marked the beginning of the phased manufacturing restart.

Best Value
Ring Sensors: Car Tracker and Alarm — Vehicle Location Tracking, Easy Installation, on Amazon Sidewalk, No Monthly Subscription
  • Real-time alerts — Receive notifications for impacts, door openings, and other disturbance alerts so you can act fast.
  • Track your vehicle’s location — Use the Ring app to view your vehicle on a map with period updates.
  • No ongoing fees — Track and protect your car with no monthly subscription or hidden fees.
  • Easy car installation — Start tracking your car right away with no tools, wiring, or complicated setup. Compatible with most vehicles.
  • Connects to your OBD-II Port — Powered by your car while driving, with a built-in backup battery that lasts up to 7 days when parked.

Frequently Asked Questions

Was the Jaguar Land Rover incident confirmed to be ransomware?

No. The reviewed official material confirmed a cyber incident and a proactive shutdown, but it did not confirm ransomware, identify the attackers or publish a definitive intrusion method.

Did Jaguar Land Rover extend the shutdown more than once?

Yes. On September 16, 2025, JLR extended the production pause until at least September 24. On September 23, it extended the pause again until October 1.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

When did Jaguar Land Rover’s factories restart?

JLR said manufacturing would begin returning in phases from October 8, 2025. Engine and battery facilities were among the first operations identified for restart, followed by stamping and vehicle-manufacturing activity in Solihull, Nitra and other locations.

Did the UK government give JLR £1.5 billion?

The government announced a UK Export Finance guarantee expected to unlock up to £1.5 billion in commercial borrowing. It was described as repayable over five years, so it was not a direct grant.

The Bottom Line

Bottom line: JLR’s September 16, 2025 extension was part of a cautious, multi-stage recovery—not the final shutdown date. The pause was extended again to October 1, supplier-payment and financing support followed, and manufacturing began a phased restart from October 8. The identity of the attackers, the attack method, any ransomware classification and the final scope of data theft remained unconfirmed in the authoritative public record reviewed.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Garage

  1. Entry001Date09 OCT 26Time3 minWhich Brake Pad Should You Buy From RockAuto or Elsewhere?Section: Blog
  2. Entry002Date09 OCT 26Time5 minThe Pros and Cons of Touchless Car Wash SystemsSection: Blog
  3. Entry003Date09 OCT 26Time3 minCan a Trickle Charger or Battery Tender Properly Charge a Car Battery?Section: Blog

Thanks for visiting Carcody

Carcody.com is a participant in the Amazon Services LLC Associates Program, an affiliate advertising program designed to provide a means for sites to earn advertising fees by advertising and linking to amazon.co

Recommended PC Tool
Recommended PC Tool
Crashes, No Sound, or Screen Glitches?Free driver scan
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.