What the Jaguar Land Rover cyberattack really cost dealers

Cameras gathered at JLR’s Solihull factory as a major cyberattack upended production and logistics in late 2025. Land Rover dealers bore the brunt: frustrated customers, disrupted workshops and bills that kept coming. Reported losses capture the direct cost; Plimsoll’s dealer analyses reveal how little profit some businesses have to cushion the blow. 

With profit margins in the JLR dealers network hovering around 1%, the cyberattack impact was painful. Plimsoll has released it latest analyses examining the wider UK car market to examine the vulnerabilities of each part of the sector against future black swan events. 

Land Rovers are often sold on their historic ability to keep going when conditions worsen. In autumn 2025, that obstacle was less photogenic than the usual mountain pass. Rather than swollen fords or cascading clifftops, Jaguar Land Rover faced computer systems that flat-out stopped working. British Leyland-levels of insubordination on a digital scale.  

For the dealers caught in Jaguar Land Rover’s cyber attack, this was more than an IT issue. Their ability to hand over cars, obtain parts and complete workshop servicing jobs was disrupted with full force. Despite the severe disruption, customers still wanted the keys to their 4x4s. Dealership staff still needed to be paid, too.  

One substantial dealer group provides a concrete measure of the damage. Vertu Motors reported £3.9m of losses from the attack for the year ended 28 February 2026, offset by £3.4m of insurance proceeds. That leaves a £500,000 difference between the reported loss and insurance income. The operational damage was considerable, even if insurance absorbed most of the reported financial hit. 

Of course, that is evidence from one group, rather than a bill for the entire JLR retail network. Plimsoll’s seven dealer analyses add a different perspective; they show the financial condition of companies across these markets, including rival dealer groups. The findings offer little comfort to anyone who assumes an expensive badge guarantees a comfortable business. 

How the disruption reached the showroom 

JLR shut down its systems on 31 August 2025. By 9 September, AJ Bell was reporting severe disruption to production and sales, while business minister Chris Bryant declined to confirm or deny whether the attack was state-sponsored. At that stage, responsibility remained unconfirmed. 

On 6 October, a second report described plans to restart some manufacturing, initially at the Wolverhampton engine plant, as part of a phased recovery. Restarting an engine factory, however, could not instantly put a finished car outside every waiting customer’s house. 

Vertu’s October 2025 interim report explains what the interruption meant at retail level. Dealerships had been unable to register or deliver new vehicles during the crucial September registration month. Diagnostic and parts-ordering systems were also offline, affecting servicing and repairs. Across its ten JLR dealerships, the group reported a £2m impact on September trading profit. 

That combination makes for potent toxicity. A delayed new-car handover can postpone the associated income, while an interruption to servicing removes another route to earnings. A workshop may have skilled technicians and cars waiting outside yet still struggle to complete work without the necessary systems or components. Some delayed transactions can be recovered once operations resume, but others may involve extra costs or customers who decide to shop elsewhere.  

The available figures do not divide the whole dealer network’s experience neatly between those outcomes, but they do show why a production shutdown could become a cash-flow problem far beyond the production line.  

How JLR dealers compare with the rest of the market 

Plimsoll’s Industry Analysis provides seven separate company samples for comparison. They are financial snapshots drawn from available accounts, rather than a measurement of losses caused by the attack. Their value here is in showing the profitability and financial risk surrounding the businesses that sell and support these vehicles. 

Source: the seven linked Plimsoll report pages, accessed 3 November 2026. Percentages in the final column are calculated from each report’s company count. Profit figures reproduce Plimsoll’s published benchmarks. Samples may overlap and include companies selling several marques; accounting periods can differ. These are company comparisons, not manufacturer results or a before-and-after study of the attack. “In danger” is a Plimsoll financial rating, not a prediction that every rated company will fail. 

The Land Rover sample offers the first surprise. Its 1.0% profit benchmark is the highest of these seven groups, despite average sales declining by 2.2%. Yet nine of the 36 companies are rated in danger, and 19 are selling less than a year earlier. A relatively stronger average leaves plenty of room for individual businesses to struggle. 

The Jaguar sample looks more constrained. Average sales growth of 0.7% sits alongside a profit benchmark of just 0.2%, with seven of 29 companies in danger and four recording losses for a second consecutive year. Plimsoll also reports average company values down by more than 25%. That valuation movement cannot be attributed to the cyber attack from these figures, but it adds to the reasons for examining individual businesses closely. 

These are modest returns for businesses handling expensive stock and demanding customers. A gleaming showroom can create a misleading impression of financial comfort. The cars may have heated massage seats; the accounts offer fewer opportunities to relax. 

The rivals had problems of their own 

It is tempting to picture rival showrooms quietly topping up the coffee machine as JLR customers lose patience. Plimsoll’s figures make that story considerably less tidy. 

Audi dealers have the strongest average sales growth in this comparison, at 3.5%. But their profit benchmark is only 0.2%, and 13 of the 30 companies are rated in danger. At 43.3%, that is the highest proportion of all seven samples. Sales growth plainly does not settle the question of financial health. 

BMW’s sample combines a slight sales decline of 0.2% with a 0.9% profit benchmark, close to Land Rover’s. Still, 16 of its 61 companies are in danger. The premium end of the market contains businesses with very different levels of resilience, whatever the badge above the entrance. 

Ford’s 0.1% profit benchmark is the thinnest in the comparison. Its analysis identifies 31 companies in danger and 22 making losses for a second successive year. Suzuki’s average sales decline of 2.0% and profit benchmark of 0.4% provide another reminder that pressure extends beyond the luxury franchises. 

The broader 4x4 dealer sample hardly provides an escape route: average sales are down 0.7%, the profit benchmark is 0.2%, and seven of 29 companies are in danger. It is also not automatically a separate set of businesses from the Land Rover sample, so the two should not be treated as opposing teams. 

None of this establishes that Audi, BMW, Ford or Suzuki dealers gained customers because JLR was disrupted. Their markets and product mixes differ, and these accounts do not trace individual buyers. What the comparison does establish is that financial strain extends across the dealer sector. A rival’s interrupted supply is only an opportunity if your own business can turn additional demand into worthwhile profit. 

The recovery depended on more than restarting computers 

Vertu’s eventual £3.9m loss was below the potential £5.5m impact it had initially anticipated. Its £3.4m insurance recovery then substantially reduced the effect on earnings. That distinction matters when judging the damage: the disruption experienced by a business and the loss remaining after insurance are different measures. 

The same outcome cannot be assumed for every dealer. Insurance arrangements, available cash, borrowing commitments and reliance on JLR will differ. A group selling several marques may have other income to draw upon, although that does not make its affected dealerships immune. The useful assessment starts with the company’s actual exposure and financial position. 

For a dealer principal, Plimsoll’s analyses help put that assessment in context. How does profitability compare with similar businesses? Is falling turnover accompanied by worsening financial strength? Which competitors are growing without sacrificing returns? For suppliers and potential buyers, the same company-level comparisons help identify where a closer examination is warranted. 

The Jaguar Land Rover attack inflicted demonstrable losses on dealers and interrupted both vehicle sales and aftersales work. Vertu gives us a measured example of the cost; Plimsoll shows why the consequences of such a shock can vary sharply from one business to another. Read the Land Rover Dealers analysis and Jaguar Car Dealers analysis to compare the companies behind the showrooms. 

In the end, a computer system can eventually be restarted. The standing orders, however, never stopped.