Jaguar Land Rover: Nearly One in Three UK Manufacturers hit by Cyberattacks, raising concerns over Industrial Resilience

UK Manufacturers Face Rising Cyber Threats as Attacks Disrupt Operations

Nearly one-third of UK manufacturers suffered a cyberattack in the past year, underscoring the escalating risks to the country’s industrial sector. A survey by Make UK, the trade body for British manufacturers, revealed that these incidents led to production disruptions, financial losses, and supply chain strain, with high-profile cases like Jaguar Land Rover (JLR) demonstrating how attacks can halt critical operations.

Despite the growing threat, many manufacturers remain unprepared. Only half of those affected had an incident response team in place, leaving businesses vulnerable to prolonged downtime and inadequate recovery efforts. The issue is compounded by digital transformation in manufacturing, where operational technology (OT), industrial control systems, and cloud-connected equipment expand the attack surface offering cybercriminals new entry points.

The risk extends beyond large enterprises. Smaller manufacturers, often with weaker security controls, can become targets for data theft, ransomware, or supply chain exploitation, as attackers prioritize vulnerabilities over company size.

The rise of generative AI further complicates the threat landscape, enabling cybercriminals to automate attacks, craft sophisticated phishing campaigns, and lower the barrier for less skilled actors. With the UK’s cybercrime costs projected to hit £15.3 billion by 2027, cybersecurity is no longer just an IT issue but a business continuity and operational resilience challenge.

As manufacturers adopt connected systems, the need for security-by-design, network segmentation, and robust incident response plans becomes critical not just to defend against attacks, but to ensure survival when they occur.

Source: https://www.cybersecurity-insiders.com/nearly-one-in-three-uk-manufacturers-hit-by-cyberattacks-raising-concerns-over-industrial-resilience/

JLR cybersecurity rating report: https://www.rankiteo.com/company/jaguar-land-rover_1

"id": "JAG1786345099",
"linkid": "jaguar-land-rover_1",
"type": "Cyber Attack",
"date": "1/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'automotive',
                        'location': 'UK',
                        'name': 'Jaguar Land Rover (JLR)',
                        'size': 'large',
                        'type': 'manufacturer'},
                       {'industry': 'various',
                        'location': 'UK',
                        'size': ['small', 'medium', 'large'],
                        'type': 'manufacturer'}],
 'attack_vector': ['phishing',
                   'vulnerabilities in OT/ICS',
                   'cloud-connected equipment'],
 'data_breach': {'data_exfiltration': True},
 'description': 'Nearly one-third of UK manufacturers suffered a cyberattack '
                'in the past year, leading to production disruptions, '
                'financial losses, and supply chain strain. High-profile cases '
                'like Jaguar Land Rover (JLR) demonstrate how attacks can halt '
                'critical operations. Many manufacturers remain unprepared, '
                'with only half of those affected having an incident response '
                'team in place. The rise of digital transformation, '
                'operational technology (OT), and generative AI has expanded '
                'the attack surface, making cybersecurity a business '
                'continuity challenge.',
 'impact': {'brand_reputation_impact': True,
            'data_compromised': True,
            'downtime': True,
            'financial_loss': True,
            'operational_impact': 'production disruptions, supply chain strain',
            'revenue_loss': True,
            'systems_affected': ['operational technology (OT)',
                                 'industrial control systems (ICS)',
                                 'cloud-connected equipment']},
 'lessons_learned': 'Cybersecurity is a business continuity and operational '
                    'resilience challenge. Security-by-design, network '
                    'segmentation, and robust incident response plans are '
                    'critical.',
 'motivation': ['financial gain',
                'data exfiltration',
                'operational disruption'],
 'post_incident_analysis': {'corrective_actions': ['security-by-design',
                                                   'network segmentation',
                                                   'enhanced monitoring'],
                            'root_causes': ['digital transformation expanding '
                                            'attack surface',
                                            'weak security controls',
                                            'lack of incident response '
                                            'preparedness']},
 'ransomware': {'data_exfiltration': True},
 'recommendations': ['Adopt security-by-design principles',
                     'Implement network segmentation',
                     'Develop robust incident response plans',
                     'Enhance monitoring of OT/ICS systems'],
 'references': [{'source': 'Make UK survey'}],
 'response': {'enhanced_monitoring': 'recommended',
              'incident_response_plan_activated': '50% of affected '
                                                  'manufacturers had an '
                                                  'incident response team',
              'network_segmentation': 'recommended'},
 'title': 'UK Manufacturers Face Rising Cyber Threats as Attacks Disrupt '
          'Operations',
 'type': ['ransomware', 'data theft', 'supply chain exploitation'],
 'vulnerability_exploited': ['weak security controls',
                             'lack of network segmentation',
                             'unprepared incident response']}