Jaguar Land Rover Automotive Plc (JLR), the luxury carmaker and a key subsidiary of Tata Motors Ltd., is battling a widespread IT security incident that has disrupted its global operations. The company has yet to provide specific details on the nature of the breach, but the outage underscores the persistent cybersecurity vulnerabilities facing the automotive industry.
The incident, confirmed in a regulatory filing by its Indian parent company, has hit JLR’s IT infrastructure across its 128 sites worldwide. The scale of the disruption has prompted the company to state it is “working at pace to resolve global IT issues impacting our business.”
This latest cyberattack follows a series of previous security challenges for JLR. In March 2025, the company was reportedly targeted by the HELLCAT ransomware group, which claimed to have leaked 350GB of sensitive data. In 2018, a data breach exposed information on hundreds of agency staff.
The timing of the current incident is particularly notable given JLR’s recent push for digital transformation. The company signed a five-year, £800 million deal with Tata Consultancy Services (TCS) in September 2023, covering cybersecurity and cloud migration. It also partnered with Tata Technologies to accelerate its “Digital 2024” program.
JLR’s operational stability is critical to its parent company’s financial performance. As the investigation continues, stakeholders are awaiting further disclosures from Tata Motors, which has committed to providing updates as more information becomes available.
