F-Type ( X152 ) 2014 - Onwards

JLR IT Systems Hacked

Thread Tools
 
Search this Thread
 
Old Sep 2, 2025 | 06:48 AM
  #1  
cpq100's Avatar
Thread Starter
|
Senior Member
5 Year Member
Liked
Loved
Joined: Nov 2019
Posts: 808
Likes: 301
From: Pennsylvania
Default JLR IT Systems Hacked

JLR has experienced an IT security issue. New plates in the UK can't be issued. Also as per Britcar UK no new JLR parts are available until the issue is resolved.

https://www.autocar.co.uk/car-news/n...-new-plate-day

 
Reply
Old Sep 2, 2025 | 10:19 AM
  #2  
bfrank1972's Avatar
Senior Member
Liked
Loved
Community Favorite
Joined: Nov 2021
Posts: 569
Likes: 297
From: Westport, CT
Default

Originally Posted by cpq100
JLR has experienced an IT security issue. New plates in the UK can't be issued. Also as per Britcar UK no new JLR parts are available until the issue is resolved.

https://www.autocar.co.uk/car-news/n...-new-plate-day
All your Y pipes are belong to us
 
Reply
Old Sep 2, 2025 | 10:29 AM
  #3  
eeeeek's Avatar
Veteran Member
5 Year Member
Community Favorite
Joined: Jun 2018
Posts: 1,614
Likes: 754
From: Granite Bay, CA
Default

Jaguar can't seem to buy a break lately...
 
Reply
Old Sep 2, 2025 | 11:06 AM
  #4  
cpq100's Avatar
Thread Starter
|
Senior Member
5 Year Member
Liked
Loved
Joined: Nov 2019
Posts: 808
Likes: 301
From: Pennsylvania
Default

New vehicle production has also been impacted. I am assuming that must be Land Rover vehicles.

https://www.msn.com/en-us/news/world...BingNewsBrowse

 
Reply
Old Sep 2, 2025 | 05:21 PM
  #5  
uncheel's Avatar
Veteran Member
10 Year Member
Liked
Loved
Community Favorite
Joined: Jan 2015
Posts: 1,595
Likes: 724
From: Chapel Hill, NC
Default

Originally Posted by cpq100
New vehicle production has also been impacted. I am assuming that must be Land Rover vehicles.

https://www.msn.com/en-us/news/world...BingNewsBrowse
I agree. Meanwhile, they also announced in July that production of the new Jaguar and LR EV models is being delayed (again) - for "additional testing and demand."
For Jaguar, that would now start in Aug 2026.
 
Reply
Old Sep 8, 2025 | 12:18 PM
  #6  
cpq100's Avatar
Thread Starter
|
Senior Member
5 Year Member
Liked
Loved
Joined: Nov 2019
Posts: 808
Likes: 301
From: Pennsylvania
Default

JLR is still being impacted by this hack.

https://www.msn.com/en-us/news/world...BingNewsBrowse

 
Reply
Old Sep 8, 2025 | 01:50 PM
  #7  
JagCode3's Avatar
Senior Member
Community Builder
Liked
Loved
Community Favorite
Joined: Jun 2024
Posts: 556
Likes: 279
From: SacTown
Default

At this point a team approach is needed to fix this...



 
Reply
Old Sep 8, 2025 | 02:38 PM
  #8  
farm-jag's Avatar
Senior Member
Community Builder
Liked
Loved
Community Favorite
Joined: Feb 2024
Posts: 416
Likes: 186
From: VA, US
Default

Originally Posted by JagCode3
At this point a team approach is needed to fix this...


Super edgy bro. Got 'em I guess.

Originally Posted by cpq100
JLR is still being impacted by this hack.

https://www.msn.com/en-us/news/world...BingNewsBrowse
I am not surprised by this. I am the IT Director for a large global manufacturer that you have all heard of, I am sure and even if they had the most robust and secure backup systems and redundantly protected data, getting a massive manufacturing information system back online can take weeks. We had one single incident here and it affected our ERP, which I assume has happened here as well, it took a rolling 2 weeks to get fully back online. When I heard about this, I felt some PTSD. From an information systems perspective, it is extraordinarily stressful, even if you did as much safeguarding as you could and was in no way the IT business services' fault. Cyber-security isn't hide and seek. It is full on World War. I checked around lunchtime and our security infrastructure had already blocked about 72,000 different attacks. Most are bots, but still, that landscape is massive. My guess is that someone in sales clicked on an email link they shouldn't have. How it happened here. Most can be detected and blocked but it is always cat and mouse and sometimes the criminals (especially state sponsored) get the one up for a bit.

Mike
 
Reply
Old Sep 8, 2025 | 08:02 PM
  #9  
JagCode3's Avatar
Senior Member
Community Builder
Liked
Loved
Community Favorite
Joined: Jun 2024
Posts: 556
Likes: 279
From: SacTown
Default

@farm-jag No offense to the IT pros. My attempt at humor failed - I meant more like "get the bad actors behind this and bring them to justice."

It sounds like a nightmare as you describe. I appreciated your insight, especially as these situations become more commonplace and affect us all...
 

Last edited by JagCode3; Sep 9, 2025 at 08:12 AM.
Reply
Old Sep 18, 2025 | 01:27 PM
  #10  
cpq100's Avatar
Thread Starter
|
Senior Member
5 Year Member
Liked
Loved
Joined: Nov 2019
Posts: 808
Likes: 301
From: Pennsylvania
Default

The impacts from this hack are ongoing.

https://www.newser.com/story/375440/...ss_world_img_b

 
Reply
Old Sep 19, 2025 | 11:00 AM
  #11  
Valerie Stabenow's Avatar
Veteran Member
5 Year Member
Liked
Loved
Community Favorite
Joined: Oct 2020
Posts: 1,416
Likes: 602
From: Wisconsin
Default Still closed

A brit friend back visiting and staying near the JLR factory reports that it is still closed.

Because this affects workers, their families and communities, we wish them a thorough and speedy recovery!
 
Reply
Old Sep 20, 2025 | 09:24 AM
  #12  
farm-jag's Avatar
Senior Member
Community Builder
Liked
Loved
Community Favorite
Joined: Feb 2024
Posts: 416
Likes: 186
From: VA, US
Default

As mentioned before, from a IT standpoint, I am in this world, and while I do not have dealings directly with TCS (the massive Tata IT Consulting Company), I know some folks globally and have heard and read some things. As bad as it seems already. It's really worse from an IT Standpoint. The issues isn't as much the hack itself now, it's getting things back to proper working order in order to restart but it is still an unknown if this IS EVEN POSSIBLE. TCS caused the problems, were the source of the intrusion, and were woefully unprepared for such a disastrous situation. They had a ridiculous contract. I think something like 800 million for 5 years of global support. Here's the thing too, TCS worked to integrate everything together making it basically impossible to start up one area (even one plant in one country) so this really is an all eggs in one basket scenario. Not to mention, it's not as easy to just "start back up" since they probably have 1000+ quite custom builds in mid-build on the assembly lines in all plants. I shudder to think of the guys in IT working to restore this stuff. The stress has got to be immense. At my plants, an hour or downtime equates to 8 million in lost production revenue. Our systems are robust and it has only happened once in 20 years, but whenever we have issues, this number is in the back of my mind. I have to basically turn my phone off because when there is down time in addition to me trying to fix the problems. I'm getting call after call after call from executives and other it people and managers etc. there is going to be a serious ripple effect when it comes to parts availability very similar or probably even worse than during covid.
 
Reply
Old Sep 21, 2025 | 02:00 AM
  #13  
Nick-Type S's Avatar
Member
Loved
Joined: Aug 2025
Posts: 59
Likes: 11
From: Orillia, ON
Default

The Guardian has just put out an article about the hack and ongoing issues https://www.theguardian.com/business...ersecurity-jlr 👍🏼
 
Reply
Old Sep 21, 2025 | 07:04 PM
  #14  
randyb's Avatar
Veteran Member
10 Year Member
Liked
Loved
Community Favorite
Joined: Aug 2011
Posts: 1,061
Likes: 144
From: FL
Default

Originally Posted by farm-jag
As mentioned before, from a IT standpoint, I am in this world, and while I do not have dealings directly with TCS (the massive Tata IT Consulting Company), I know some folks globally and have heard and read some things. As bad as it seems already. It's really worse from an IT Standpoint. The issues isn't as much the hack itself now, it's getting things back to proper working order in order to restart but it is still an unknown if this IS EVEN POSSIBLE. TCS caused the problems, were the source of the intrusion, and were woefully unprepared for such a disastrous situation. They had a ridiculous contract. I think something like 800 million for 5 years of global support. Here's the thing too, TCS worked to integrate everything together making it basically impossible to start up one area (even one plant in one country) so this really is an all eggs in one basket scenario. Not to mention, it's not as easy to just "start back up" since they probably have 1000+ quite custom builds in mid-build on the assembly lines in all plants. I shudder to think of the guys in IT working to restore this stuff. The stress has got to be immense. At my plants, an hour or downtime equates to 8 million in lost production revenue. Our systems are robust and it has only happened once in 20 years, but whenever we have issues, this number is in the back of my mind. I have to basically turn my phone off because when there is down time in addition to me trying to fix the problems. I'm getting call after call after call from executives and other it people and managers etc. there is going to be a serious ripple effect when it comes to parts availability very similar or probably even worse than during covid.
How do you know this is TCS fault, you don't. As some who has been in IT for 50 years, I cannot name a big company that has not been hacked, You can prepare all you want , but when someone gets an email from who they think is a big boss or has there email hacked, there is NOTHING a company can do to stop the hack. Until Microsoft and all the other big name IT companies put an end to email whitewashing, phishing emails with bad email addresses, nothing is going to happen and with Microsoft and others make millions from phishing protection, nothing is going to change in the foreseeable future.
 
Reply
Old Sep 21, 2025 | 08:10 PM
  #15  
jp0928's Avatar
Junior Member
Liked
Joined: Jul 2023
Posts: 1
Likes: 0
From: Atlanta
Default

Originally Posted by randyb
How do you know this is TCS fault, you don't. As some who has been in IT for 50 years, I cannot name a big company that has not been hacked, You can prepare all you want , but when someone gets an email from who they think is a big boss or has there email hacked, there is NOTHING a company can do to stop the hack. Until Microsoft and all the other big name IT companies put an end to email whitewashing, phishing emails with bad email addresses, nothing is going to happen and with Microsoft and others make millions from phishing protection, nothing is going to change in the foreseeable future.
You may want to read the Guardian article sited above in #13.


 
Reply
Old Sep 21, 2025 | 09:50 PM
  #16  
cpq100's Avatar
Thread Starter
|
Senior Member
5 Year Member
Liked
Loved
Joined: Nov 2019
Posts: 808
Likes: 301
From: Pennsylvania
Default

Originally Posted by randyb
How do you know this is TCS fault, you don't. As some who has been in IT for 50 years, I cannot name a big company that has not been hacked, You can prepare all you want , but when someone gets an email from who they think is a big boss or has there email hacked, there is NOTHING a company can do to stop the hack. Until Microsoft and all the other big name IT companies put an end to email whitewashing, phishing emails with bad email addresses, nothing is going to happen and with Microsoft and others make millions from phishing protection, nothing is going to change in the foreseeable future.
Actually some companies do try to prevent hacks. One company I worked for used to send out phony scam emails courtesy of the IT department. Those that clicked on them and/or responded got flagged and had to complete a training course on how to spot scam emails. More than one violation could lead to more serious consequences.
 
Reply
Old Sep 22, 2025 | 05:23 AM
  #17  
F-type-r-2022's Avatar
Senior Member
Liked
Joined: Jul 2022
Posts: 224
Likes: 51
Default

Originally Posted by cpq100
Actually some companies do try to prevent hacks. One company I worked for used to send out phony scam emails courtesy of the IT department. Those that clicked on them and/or responded got flagged and had to complete a training course on how to spot scam emails. More than one violation could lead to more serious consequences.
Most companies do. This would never happen at Ford or GM and the Feds would immediately step in to assist. JLR is a situation where there was a conflict of interest whereby TATA owns JLR and used another TATA company to handle the IT. Much like when TATA was supplying cheap uncoated steal to JLR for the F-Type rear frame that was later recalled due to early corrosion.🤦‍♀️
 
Reply
Old Sep 22, 2025 | 08:27 AM
  #18  
DMeister's Avatar
Veteran Member
Community Builder
Liked
Loved
Community Favorite
Joined: Jan 2023
Posts: 1,680
Likes: 697
From: Ontario, Canada
Default

Originally Posted by F-type-r-2022
Most companies do. This would never happen at Ford or GM and the Feds would immediately step in to assist. JLR is a situation where there was a conflict of interest whereby TATA owns JLR and used another TATA company to handle the IT. Much like when TATA was supplying cheap uncoated steal to JLR for the F-Type rear frame that was later recalled due to early corrosion.🤦‍♀️
Yeah, you are most definitely correct that most serious companies do. But to suggest that it couldn't happen to these more serious companies too is not a correct statement I don't think. 0 day exploitation campaigns on the part of attackers certainly do happen. That said, any company with a serious defensive cyber product in place should be able to contain and recover much more efficiently than what we've seen happen here. Perhaps that is what you meant.

I can't even imagine the stress some people are under right now in this mess. Crazy.
 
Reply
Old Sep 22, 2025 | 10:22 AM
  #19  
eeeeek's Avatar
Veteran Member
5 Year Member
Community Favorite
Joined: Jun 2018
Posts: 1,614
Likes: 754
From: Granite Bay, CA
Default

The weak link is always people. You can send as many phishing email to try to teach people how to spot them, and then they'll click on something officail looking with a survey monkey link and enter their credentials.
 
Reply
Old Sep 22, 2025 | 05:27 PM
  #20  
Mitch V6S's Avatar
Junior Member
Joined: Mar 2025
Posts: 6
Likes: 3
From: Texas
Default

My 3 month old 2024 F Type Dynamic R roadster has been at the dealership since 8/28 waiting for an ABS module. Maybe it’s in one of two containers arrived stateside last week, but the system is down, so dealer can’t see the manifest. I’m trying to keep in mind that it is a toy, my livelihood doesn’t depend on it, could be a lot worse. I do miss my cat.
 
Reply



All times are GMT -5. The time now is 01:01 PM.