JLR Restarts Production After Month-Long Pause: Timeline Of Cyberattack That May Lead To $2 Bn Losses

After over a month-long pause, Tata Motors-backed Jaguar Land Rover has finally resumed manufacturing operations from October 8th onward. The luxury carmaker has also introduced new financing solutions for its suppliers. JLR faced a huge blow after a group of teenagers claimed to have hacked its systems during the end of August. The cyberattack brought JLR's business to a standstill and reportedly is going to result in a whopping $2 billion loss for the company and its parent, Tata Motors.

This makes JLR's cyber crisis one of the biggest in the automobile sector. Here's a timeline of the cyberattack and new changes by JLR.

JLR Restarts Vehicle Production:

According to the regulatory filing of Tata Motors, JLR announced to begin its manufacturing operations in a phased manner.

It announced that operations at the Electric Propulsion Manufacturing Centre (EPMC), where the company builds engines, and its Battery Assembly Centre (BAC), both in the West Midlands, UK restart on Wednesday, October 8.

On October 8th, its colleagues will also return to work at its stamping operations in Castle Bromwich, Halewood and Solihull, UK, and other key areas of its Solihull vehicle production plant, such as its body shop, paint shop and its Logistics Operations Centre (LOC), which feeds parts to JLR's global manufacturing sites.

After this, the vehicle manufacturing in Nitra, Slovakia, and restart of the Range Rover and Range Rover Sport (MLA) production lines in the Solihull facility will begin later this week.

Further updates on the next steps of the controlled, phased restart will follow, including for JLR's Halewood plant on Merseyside, it said.

Adrian Mardell, Chief Executive Officer of JLR, said, "This week marks an important moment for JLR and all our stakeholders as we now restart our manufacturing operations following the cyber incident."

JLR New Financing Scheme:

Alongside restarting operations, JLR has also introduced a new financing scheme. Under the new scheme, the qualifying JLR suppliers are to be paid much faster than under their standard payment terms, aiding their cashflow in the near term.

The scheme will be expanded, including to some non-production suppliers.

For this scheme, JLR is closely working with banking partners.

Through this scheme, JLR suppliers will receive payments 60-days post invoice, so this scheme accelerates payments by as much as 120 days. Also, the company will reimburse the financing costs for those JLR suppliers who use the scheme during the restart phase, as the company returns to full production.

The Cost Of Cyberattack:

Earlier, The Financial Times report estimated that the cyberattack on JLR could lead to losses of up to $2 billion, which will likely be a drawback for Tata Motors as well.

However, a BBC report earlier said that analysts are predicting the JLR cyberattack to result in losses of £50 million per week.

Meanwhile, according to JM Financial analysts, the attack will affect JLR's liquidity, though the management stated it is currently difficult to quantify the exact impact. Going forward, analysts said, "the focus remains on how quickly JLR can scale up production. On the demand front, the outlook remains positive: US demand is resilient with the tariff uncertainty resolved, UK maintains similar momentum, and China demand is stable although JLR will absorb near-term cost pressure due to the reduction in luxury tax threshold from RMB 1.3mn to RMB 0.9mn."

Moreover, analysts at Emkay Global said, "Q1 saw tariff impact; worries now behind, with deals of EU/UK and US in place. JLR's sales commence; production to begin soon. While Sep retails unaffected, wholesales to be managed; some liquidity hit expected due to production halt. Despite geo-political issues, the US market is resilient, China is holding up, and EU/UK are stable."

List Of Biggest Cyberattacks On Companies In London

Timeline Of JLR Cyberattack:

August 31: It all started on this day. JLR, which was preparing for a busy September, was met with chaos as its systems were impacted due to a cybersecurity incident.

According to reports, a group of younger hackers who called themselves the 'Scattered Lapsus$ Hunters' claimed responsibility for the hack on Telegram. As per a BBC report, they posted screenshots of their crimes, which showed access to JLR's internal networks. Among many bragging taunts, one said, "Where is my new car, Land Rover?"

September 2: JLR made its first official statement on the cyberattack on September 2nd. That time, JLR said, "JLR has been impacted by a cyber incident. We took immediate action to mitigate its impact by proactively shutting down our systems." JLR informed that both its retail and production activities have been severely disrupted.

After this, JLR gave back-to-back updates on the cybersecurity crises.

September 6: JLR revealed it continues to work around the clock to restart our global applications in a controlled and safe manner following the recent cyber incident. They are working with a third‑party cybersecurity specialist and alongside law enforcement.

September 10: Due to the cyberattack, JLR announced that some data has been affected and we are informing the relevant regulators.

September 16: JLR informed colleagues, suppliers and partners the extension of the current pause in its production until Wednesday, 24th September 2025.

September 23: The pause was extended until Wednesday, October 1st.

September 25: JLR informed that its digital assets are now up and running. Its foundational work on the recovery program is firmly underway, said JLR.

October 7: JLR announced to restart its manufacturing facilities in phased manner from October 8th onward. Apart from this, the company launched a new financing scheme to support JLR suppliers.