Jaguar Land Rover Cyberattack: £196M Loss Highlights OT Security Risks

In September 2025, Jaguar Land Rover (JLR) suffered a significant cyberattack attributed to the group Scattered Lapsus$ Hunters. The attack disrupted production systems and resulted in data theft, costing the company £196 million in losses for the quarter. The incident underscores the vulnerabilities in industrial control systems (ICS) and operational technology (OT) networks, which are increasingly targeted by cybercriminals. The attack likely involved credential theft or social engineering, tactics previously associated with the Lapsus$ group. The financial impact highlights the critical need for robust cybersecurity measures in manufacturing, including identity and access management (IAM) solutions, OT network segmentation, and comprehensive incident response planning. This event serves as a stark reminder of the operational and financial risks posed by cyber threats in the automotive industry. Cybersecurity professionals should prioritize threat intelligence sharing and supply chain risk management to mitigate similar attacks.