Jaguar Land Rover cyberattack may have stolen data, production paused

Jaguar Land Rover said Wednesday that a cyberattack that forced it to suspend production at multiple factories and disrupted sales and repairs has affected some data, as investigators and government officials work to determine who was responsible and how extensive the damage is. The U.K.-based automaker, owned by India’s Tata Motors, detected the incident on August 31 and disclosed it publicly on September 2, and production remains paused at sites including Solihull and Halewood in the U.K. and an engine plant in Wolverhampton.

The company said its ongoing forensic work now indicates that some data was taken and that it has informed relevant regulators and will contact anyone whose data is affected. In a statement, Jaguar Land Rover said it has been working "around the clock, alongside third-party cyber security specialists, to restart our global applications in a controlled and safe manner" and added "we are very sorry for the continued disruption this incident is causing."

Early company briefings had said there was no evidence customer information had been stolen; the updated position did not specify whether the data related to customers, employees, suppliers or internal...