Total Tests:

JLR Hack UK's Costliest Ever, Hitting Economy with £1.9bn Loss

Infosecurity Magazine
By Kevin Poireault for Infosecurity Magazine
Wednesday, October 22, 2025

The cyber-attack that hit Jaguar Land Rover (JLR) in August 2025 was the most economically damaging cyber event to hit the UK, according to an independent body.

Ilia Kolochenko, CEO at ImmuniWeb, believes that the total financial loss estimated by the CMC is likely far from the true overall cost of the cyber-attack on JLR.

“The estimated £1.9bn loss may be just a small fraction of the total financial loss, merely representing already incurred and now-foreseeable losses that can be quantified,” he said.

“For instance, possible theft of valuable JLR’s trade secrets and their subsequent exploitation by rival corporations in hostile nations states may cause significancy more losses in the long-term perspective, even culminating in bankruptcy of JLR amid the unfolding economic uncertainty and looming financial crisis.”

Kolochenko also highlighted that the combined cost of several cyber-attacks targeting the same country or industry may be superior that the sum of its parts, especially when these attacks benefit to other nation states.

“What is even more alarming here is a doom-like scenario, when a hostile nation state hackers attack simultaneously 20 or 30 British companies of a similar size and national importance as JLR, including providers of critical national infrastructure. This mean that the entire country may stay without internet or even water and electricity for some time, let alone a brutal crush of economy and possible collapse of the British stock market,” he added.

Kolochenko advocated for companies of national importance to be “proactively audited by governmental agencies, setting cybersecurity and data protection compliance bar much higher than imposed by, say, UK GDPR or even the upcoming Cyber Security and Resilience Bill.” Read Full Article


Previous Media Publications:

Infosecurity Magazine: Experian Fined €2.7m For GDPR Breach in Netherlands

Identity Week: Experian GDPR fine

Ask a Question