What happened in the Jaguar Land Rover cyber-attack?
In late August and early September 2025, Jaguar Land Rover (JLR) – Britain's largest carmaker – confirmed a major cyber incident that forced it to shut down core computer systems worldwide. As a precaution, JLR proactively switched off key IT and operational technology, halting manufacturing and severely disrupting retail operations across the UK, Slovakia, Brazil, India and other markets.
The disruption lasted for weeks, leaving factories idle, workers sent home and suppliers facing serious financial pressure. JLR has now confirmed that some data held in its systems was affected by the incident, and this follows earlier reports in 2025 of a separate ransomware group claiming to have stolen large volumes of internal JLR data. The full extent of what was accessed is still being investigated, but the incident raises serious questions about how personal and business information connected to JLR has been protected.
Who might be affected? Customers, employees, agency workers, contractors, suppliers and dealership contacts whose information was stored in JLR's systems during the 2025 cyber incidents, including those who bought, leased or serviced Jaguar or Land Rover vehicles.
What type of data? Personal and account details held by JLR – for example names, contact details, addresses, identification or HR numbers, employment and payroll records, and information linked to vehicles, finance or service history. The exact categories will depend on how you interact with JLR.
Why it matters: Access to this kind of information can increase the risk of identity theft, fraud, targeted scams and ongoing distress – especially for people who rely on their vehicles for work or whose livelihood and supply chains are tied to JLR.
Sources: JLR: Statement on Cyber Incident, JLR recovery update, The Guardian: manufacturing & retail disruption, The Guardian: inside the JLR hack.
Who can join the claim?
- •Individuals who purchased, leased or financed Jaguar or Land Rover vehicles and whose information was held by JLR at the time of the 2025 cyber-attack – for example as a customer, account holder or service customer.
- •Current or former JLR employees, agency workers or contractors who believe their HR, payroll or internal account details may have been affected by the incident.
- •Suppliers, dealerships or business partners who have faced disruption, financial loss or significant inconvenience because JLR's systems were forced offline or because of potential data misuse.
- •Anyone contacted by JLR, a Jaguar / Land Rover dealership, Tata Motors or a regulator about the cyber-attack, a cyber security incident or a possible data breach involving JLR systems.
How our no win no fee works
We charge nothing upfront for investigating your potential Jaguar Land Rover data breach claim. If the claim is not successful, you pay nothing for our legal fees. If the case succeeds, our success fee is taken from the compensation recovered or as set out in our retainer/DBA terms, which are clearly explained and sent to you for e-signature before you commit.
What evidence should I collect?+
Keep copies of any letters, emails or messages from Jaguar Land Rover, your Jaguar / Land Rover dealership, Tata Motors or your finance provider about the cyber-attack or IT outage. Save screenshots of notifications and bank statements showing suspicious activity, credit monitoring alerts or scam calls, texts or emails that appear to use your JLR or vehicle information. If your business or work was disrupted by the shutdown, keep records of cancelled orders, lost income or extra costs. All of this helps us assess your claim.
What happens after I submit my details?+
First, we run a quick eligibility check based on how you're connected to JLR and what we know so far about the cyber-attack. If you're potentially in scope, we'll send you no win, no fee documents to review and sign electronically. Once you decide to proceed, our team will begin building your claim, gather further evidence where needed, and keep you updated as any group litigation or settlement discussions progress.
This page is for information only and does not constitute legal advice. A solicitor–client relationship only begins once you have signed our retainer documents.