JLR hack cost £2.1bn. Why has no one named the state behind it?

A cyber-attack on Jaguar Land Rover caused up to £2.1bn in damage and halted production for five weeks, making it the most economically damaging cyber incident in UK history. The Cyber Monitoring Centre put the cost at £1.9bn, with a range of £1.6bn to £2.1bn. Around 5,000 organisations were affected — car showrooms, repair shops, and small manufacturers supplying parts and materials — and 200,000 jobs were thrown into doubt.

The attribution question is being answered by a former official, not the government. Al Carns, a former armed forces minister, said at a Chatham House event in July that the attack was state-sponsored, arguing it was highly unlikely an attack of that magnitude could come from a country without the host state knowing. His comments were the first acknowledgement from a government figure that a hostile foreign power backed the attack in August last year.

A New York Times investigation in June linked the breach to a Russian hacking group, prompting a coordinated response involving the FBI, Google, Microsoft, and UK security agencies. The Telegraph reported at the time that Russia was suspected, but no final assessment was made public. The UK government has supplied incident statistics on Russia-originating cyberattacks but no cost estimate, according to a parliamentary answer to Graeme Downie MP on 9 September.

MPs are calling for more transparency on hostile cyber activity. The gap matters: if a hostile state was behind the JLR hack, it would rank among the most economically damaging state-linked cyber incidents against the UK, with costs falling on thousands of smaller businesses and workers, not just one manufacturer.