The cyberattack that crippled Jaguar Land Rover (JLR) has cost the United Kingdom an estimated £1.9 billion, in what experts are calling the most economically damaging cyber event the country has ever experienced, Financial Times reported.
According to an analysis by the Cyber Monitoring Centre (CMC), the month-long disruption that began on August 31 shut down internal systems and halted production across JLR’s UK operations, affecting more than 5,000 British organisations through its supply chain.
“This incident looks to have been by some distance, the single most financially damaging cyber event ever to hit the UK,” said Ciaran Martin, former head of the National Cyber Security Centre and chair of CMC’s technical committee.
The UK government intervened with a £1.5 billion loan guarantee to support JLR, which is owned by India’s Tata Motors, helping the automaker regain access to credit and stabilise its operations. JLR only recently restarted partial vehicle production following the prolonged shutdown.
CMC’s analysis attributes most of the financial losses to reduced vehicle sales, profit declines during the production halt, incident response costs, and the ripple effect on suppliers and local businesses. The organisation’s estimate assumes JLR will not fully restore production until early next year and that the attack did not compromise the company’s “operational technology” systems — a deeper breach that could have taken even longer to repair.
The UK’s National Crime Agency is leading the investigation, though details about the perpetrators remain scarce. CMC did not include assumptions about ransom payments in its analysis.
Recent years have seen a surge in ransomware attacks across the UK, targeting firms including Marks & Spencer, Co-op, and NHS England. In June, CMC estimated that cyberattacks on M&S and Co-op caused losses between £270 million and £440 million.
Martin warned that incidents like JLR’s highlight growing risks to the nation’s economic resilience. “Cyber security has become economic security. And economic security is national security,” he said at a speech in London, noting that such disruptive attacks could serve as blueprints for hostile states seeking to undermine national interests.
The National Cyber Security Centre echoed similar concerns last week, warning that state actors from countries such as China and Russia continue to pose “a significant threat” to the UK’s cyber infrastructure. The agency recorded 204 nationally significant cyber incidents in the 12 months to August 2025 — more than double the previous year’s total.
