Jaguar Land Rover suffered a $2.5 billion cyberattack that shut down its operations for five weeks, according to a new report. The breach, which occurred in 2025, has been attributed to Russian hackers who exploited vulnerabilities in the automaker's systems.
The attack, detailed by Inc., paralyzed the British luxury vehicle manufacturer for over a month, causing significant financial damage. The $2.5 billion figure represents the estimated cost of the disruption, though specific breakdowns of expenses—such as lost production or ransom payments—have not been disclosed.
The hackers' motivations remain unclear, with one official quoted as saying, 'They just wanted to see if they could do it.' This suggests the breach may not have been financially motivated but rather a demonstration of capability, raising concerns about the vulnerability of critical infrastructure to state-aligned threat actors.
The automotive industry has become an increasingly frequent target for cyberattacks, given its complex supply chains and reliance on connected technologies. The incident underscores the growing need for robust cybersecurity measures in manufacturing sectors, where a single breach can halt entire production lines for weeks.
Jaguar Land Rover has not publicly commented on the report, and it remains unknown whether the company paid any ransom or fully recovered its systems. The case highlights the difficulty of attributing attacks to specific state actors and the challenges firms face in preventing sophisticated intrusions.