Jaguar Land Rover confirms a cyberattack caused factory disruptions and led to a data breach, compromising sensitive information.
In early September, Jaguar Land Rover shut down systems to mitigate a cyberattack that disrupted production and retail operations. The attack also impacted systems at the Solihull production plant.
UK dealers reported JLR disruptions blocking car registrations and parts supply.
The company initially said customer data was not compromised.
“JLR has been impacted by a cyber incident. We took immediate action to mitigate its impact by proactively shutting down our systems. We are now working at pace to restart our global applications in a controlled manner.” reads the statement published by the automaker. “At this stage there is no evidence any customer data has been stolen but our retail and production activities have been severely disrupt”
The automaker did not disclose technical details about the incident; however, the group “Scattered Lapsus$ Hunters,” behind recent UK retail cyberattacks, claimed responsibility for the JLR attack.
Jaguar Land Rover (JLR) is a British luxury vehicle manufacturer headquartered in Whitley, Coventry, UK. JLR combines two iconic brands, Jaguar and Land Rover. Since 2008, JLR has been owned by Tata Motors (India), which bought it from Ford. JLR sells vehicles in over 120 countries, with major markets in Europe, North America, and China.
Now, JLR confirms that the cyberattack also led to a data breach without disclosing details about the type of information that has been compromised.
“As a result of our ongoing investigation, we now believe that some data has been affected and we are informing the relevant regulators.” reads a statement issued by the carmaker. “Our forensic investigation continues at pace and we will contact anyone as appropriate if we find that their data has been impacted.”
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, Jaguar Land Rover)
