The Cyber Monitoring Centre (CMC) has estimated that the recent malicious cyber incident affecting Jaguar Land Rover (JLR) is in the range of £1.6 billion to £2.1 billion; which could be higher if operational technology has been significantly impacted or there are unexpected delays in bringing production back to pre-event levels. The Centre, a non-profit body, suggested this made it the most economically damaging cyber event ever to hit the UK.
Chair of the CMC Technical Committee is Ciaran Martin, founder CEO of the UK official NCSC (National Cyber Security Centre). He, echoed by the CMC, argues that cyber policy, and insurance, should focus not on data protection legal compliance, but the building of resilient operations.
Background
In late August 2025, Jaguar Land Rover experienced a ‘cyber incident‘, which affected JLR’s internal IT and leading to an IT shutdown and a halt in global factory operations, including its UK plants at Solihull, Halewood, and Wolverhampton. Production lines were halted for weeks, dealer systems were intermittently unavailable, and suppliers faced cancelled or delayed orders. The car-maker described its three‑months to September 30 as a ‘challenging quarter‘. By comparison, the CMC earlier this year estimated losses to UK retailers Marks & Spencer (M&S, pictured) and Co-op after a combined cyber attack at between £270m and £440m.
Comment
