Jaguar Land Rover: when a cyberattack stops factories for six weeks

In late August 2025, a cyberattack halted Jaguar Land Rover’s production for nearly six weeks. The UK government had to guarantee a loan of up to £1.5bn. Lessons for manufacturers and their suppliers.

In late August 2025, carmaker Jaguar Land Rover (JLR) was hit by a cyberattack. In early September it had to suspend production at its UK plants. The stoppage lasted nearly six weeks, an exceptional length for an incident of this kind.

A shock for the whole supply chain

JLR was not the only one hit. Many small suppliers warned about their cash flow: with no orders coming in, some feared running out of money within weeks.

An unprecedented government response

• On 28 September 2025, the UK government announced a guarantee on a loan of up to £1.5bn.
• According to press reports, it was the first time a UK company received this kind of support after a cyberattack.
• It emerged that JLR did not have cyber insurance, reopening the debate on how such risks are covered.

Lessons for manufacturers

• Separate production networks from office networks, so one intrusion does not stop everything.
• Regularly test restoring systems, not just the existence of backups.
• Identify critical suppliers and agree a plan with them for a shutdown.
• Consider cyber insurance, and read exactly what it covers.

What it means for Moroccan suppliers

Moroccan manufacturers often work for European customers. An incident at a customer can stop orders; and a poorly protected supplier can become the way into an attack. Showing good security practices is becoming a commercial argument.

A cyberattack never hits just one company: it hits its whole chain.

Sources: UK government, BBC, BleepingComputer, Automotive News, September to November 2025.

Want a B2B website that reassures your customers? Tell us about your project through our estimate form: we will reply with an estimate and the next steps.