Jaguar Land Rover Brings Some IT Systems Online In ‘Phased Restart’ After Attack

Jaguar Land Rover (JLR) has said parts of its IT systems are back online as the company begins a “phased restart” of operations after a major cyberattack forced it to shut down production at its UK factories.

Britain’s largest carmaker has faced several weeks of disruption since hackers targeted its digital infrastructure in late August. The shutdown is expected to last until at least 1 October, but the company confirmed on Tuesday that it had successfully restored some core systems.

A JLR spokesperson said: “As part of the controlled, phased restart of our operations, today we have informed colleagues, suppliers and retail partners that sections of our digital estate are now up and running. The foundational work of our recovery programme is firmly under way.”

One of the most urgent steps has been clearing a backlog of payments to suppliers. JLR said it had increased processing capacity for invoices and resumed payments, providing critical relief to firms within its extensive supply chain. Unions and politicians have warned that smaller suppliers risk collapse without cash flow support during the shutdown.

The company’s global parts logistics centre, which supplies replacement parts for servicing customers’ vehicles, is also returning to full operations. JLR has additionally resumed processing wholesales of vehicles, allowing cars to be sold and registered more quickly.

“These are important initial steps as our dedicated teams work around the clock alongside cybersecurity specialists, the UK Government’s NCSC and law enforcement to ensure we restart in a safe and secure manner,” the company said.

For project managers, JLR’s phased recovery highlights the scale of challenges posed by cyberattacks on complex, global businesses. Coordinating IT restoration, supplier payments, logistics and customer support under crisis conditions requires rigorous planning, strong communication and collaboration with external partners. The case also underscores the importance of cyber resilience as a core part of business continuity strategies across industries.