Professional law office
No Win, No Fee-Free eligibility check

Jaguar Land Rover
Data Breach Claim

In a major cyber-attack on Jaguar Land Rover's IT and operational systems, the company was forced to shut down core applications across its global network. Production lines and retail operations were severely disrupted for weeks while investigations into the incident continue. JLR has confirmed that data was affected, but has not yet publicly set out the full scope of what was accessed.

If your personal or business information was held in JLR systems - for example as a customer, employee, contractor, supplier or dealership contact, you may have been impacted. Our data breach team is investigating potential compensation claims on a No Win, No Fee basis.

Contact & Account Details
Vehicle & Finance History
Employment & Payroll Data
Understanding the Incident

What happened in the Jaguar Land Rover cyber-attack?

In late August and early September 2025, Jaguar Land Rover (JLR) - Britain's largest carmaker - confirmed a major cyber incident that forced it to shut down core computer systems worldwide. As a precaution, JLR switched off key IT and operational technology, halting manufacturing and severely disrupting retail operations across the UK, Slovakia, Brazil, India and other markets.

Legal documents and case files

2025

Cyber incident

The disruption lasted for weeks, leaving factories idle, workers sent home and suppliers facing serious financial pressure. JLR has now confirmed that some data held in its systems was affected by the incident, and this follows earlier reports in 2025 of a separate ransomware group claiming to have stolen large volumes of internal JLR data.

The full extent of what was accessed is still being investigated, but the incident raises serious questions about how personal and business information connected to JLR has been protected. Our Data Breach Team at Bingham Long is investigating compensation claims on a No Win, No Fee basis.

If your personal or business information was held in JLR systems - for example as a customer, employee, contractor, supplier or dealership contact - you may have been impacted.

JLR has confirmed that some data held in its systems was affected and investigations remain ongoing. We will update this page as more details are released.

Who might be affected

Customers, employees, contractors, suppliers and dealership contacts whose details were stored in JLR systems during the 2025 incidents.

What type of data

Names, contact details, addresses, identification or HR numbers, employment and payroll records, plus vehicle, finance or service history.

Why it matters

Access to this information can increase the risk of identity theft, fraud, targeted scams and ongoing distress.

Join the Claim

Who Can Join the Claim?

If you believe you fall under any of these categories, you may be eligible for compensation through our JLR data breach claim.

Individuals who purchased, leased or financed Jaguar or Land Rover vehicles and whose information was held by JLR at the time of the 2025 cyber-attack.

Current or former JLR employees, agency workers or contractors who believe their HR, payroll or internal account details may have been affected.

Suppliers, dealerships or business partners who faced disruption, financial loss or significant inconvenience after JLR systems were forced offline.

Anyone contacted by JLR, a Jaguar / Land Rover dealership, Tata Motors or a regulator about the cyber-attack or a possible data breach.

Professional legal team
No Win, No Fee

We charge nothing upfront. The success fee is taken from compensation only if the claim succeeds.

Simple Process

The Claim Process Explained

We've made joining the claim as simple as possible. Here's what to expect at each stage of the process.

01

Check Your Eligibility

Complete our short eligibility check. We'll ask a few questions to confirm how you're connected to Jaguar Land Rover and whether your data may have been affected by the 2025 cyber incident. This step is quick and there is no obligation.

02

Submit Your Details

If you appear eligible, you'll be asked to submit some basic details so we can review your position more closely and assess your potential claim.

03

Sign Your Documents

You'll receive access to our secure client portal where you can sign your retainer documents electronically. Everything is explained clearly before you sign.

04

We Progress Your Claim

After onboarding, we take care of progressing the claim on your behalf. We'll keep you informed throughout the process and handle all the legal work.

How our no win no fee works

  • We charge nothing upfront for investigating your Jaguar Land Rover data breach claim.
  • If the claim is not successful, you pay nothing for our legal fees.
  • If the case succeeds, the success fee is taken from compensation as set out in the documents you review and sign before you commit.
FAQ

Frequently Asked Questions

Find answers to common questions about the Jaguar Land Rover cyber incident and our claims process. If you have additional questions, don't hesitate to contact us.

Latest Coverage

Latest Coverage & Breach Updates

Stay alert for scams using your Jaguar Land Rover or vehicle information. Be cautious of unexpected calls, emails or texts claiming to be from JLR, your dealership or your finance provider and asking for bank details, passwords or copies of ID. Always check messages against official channels and monitor your accounts for suspicious activity.

Official Updates

JLR: Statement on Cyber Incident

Official statement confirming the cyber incident and ongoing investigation.

News Coverage

The Guardian: manufacturing and retail "severely disrupted"

Reporting on the operational impact across factories and retail sites.

BBC News: Jaguar Land Rover cyber-attack coverage

Overview of the incident and its effects on operations.

Additional Coverage

The Guardian: inside the Jaguar Land Rover hack

Background on the attack and cybersecurity response.

Scales of justice
Take Action Today

Ready to check your eligibility-

Check your eligibility for the Jaguar Land Rover data breach claim and let our Data Breach Team guide you through the next steps.

Privacy Policy

Privacy Policy

Who We Are

Our website address is: https://jlrdatabreach.com.

This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or contact us.

Purpose of Contact and Lawful Basis

When you submit an enquiry through our website or otherwise express an interest in joining a claim, we will use the personal information you provide (such as your name, address, contact details and the circumstances of your enquiry) to respond to you, assess your eligibility to join the claim and to take steps at your request prior to entering into a contract of retainer with us. Our lawful basis for this processing is Article 6(1)(b) UK GDPR (“performance of a contract” and “steps taken at your request before entering into a contract”).

Where we send limited follow-up communications after your initial enquiry and you have not yet responded, we do so on the basis of our legitimate interests under Article 6(1)(f) UK GDPR. Our legitimate interests are to provide you with information relevant to your enquiry, to determine whether you wish to proceed, and to manage our prospective-client relationship.

Period of Contact and Enquiry Closure

We will continue to contact you regarding your enquiry for a period of up to six months from your last interaction with us. If we do not receive a response within this period, we will assume that you no longer wish to proceed. We will then cease further contact and will retain your information only in accordance with our retention policy or delete it where appropriate.

Not a Client Until a Retainer Is Signed

Please note that submitting an enquiry and receiving communications from us does not create a solicitor–client relationship. You will only become a client of the firm once you have signed a Conditional Fee Agreement or another formal contract of retainer with us.

Transparency & Link to Privacy Notice

When you submit an enquiry through our website, you will be directed to this Privacy Notice so that you understand how we use your personal information before we continue communicating with you.

Data Minimisation and Retention

We retain only the minimum personal data necessary to handle your enquiry. If you do not proceed, we will delete or anonymise your information after the enquiry-closure period unless we are required to retain it for regulatory or legal purposes.

Right to Object

You may request at any time that we stop contacting you about your enquiry by replying to any of our messages or emailing us at [contact address].

Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent string to help with spam detection.

An anonymized string created from your email address (also called a hash) may be provided to the Gravatar service to determine if you are using it. The Gravatar service privacy policy is available at: https://automattic.com/privacy/. After approval of your comment, your profile picture is visible to the public in the context of your comment.

Media

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS). Visitors to the website can download and extract any location data from images on the website.

Cookies

If you leave a comment on our site, you may opt in to saving your name, email address, and website in cookies. These cookies are for your convenience and last for one year.

If you visit our login page, we will set a temporary cookie to determine whether your browser accepts cookies. This cookie contains no personal data and is discarded when you close your browser.

When you log in, we set cookies to save your login information and screen display preferences. Login cookies last for two days, and screen options cookies last for one year. If you select “Remember Me,” your login will persist for two weeks. Logging out removes login cookies.

If you edit or publish an article, an additional cookie will be stored in your browser. This cookie contains no personal data and expires after one day.

Embedded Content from Other Websites

Articles on this site may include embedded content (such as videos, images, or articles). Embedded content from other websites behaves in the same way as if you had visited the other website directly.

These websites may collect data about you, use cookies, embed third-party tracking, and monitor your interaction with the embedded content, including tracking your interaction if you are logged in to that website.

Who We Share Your Data With

If you request a password reset, your IP address will be included in the reset email.

Visitor comments may be checked through an automated spam detection service.

How Long We Retain Your Data

If you leave a comment, the comment and its metadata are retained indefinitely to help recognize and approve follow-up comments automatically.

For users who register on our website (if any), we store the personal information provided in their user profile. Users can view, edit, or delete their personal information at any time (except their username). Website administrators can also view and edit that information.

Retention of enquiry-related data is governed by the Data Minimisation and Retention and Period of Contact and Enquiry Closure sections above.

What Rights You Have Over Your Data

If you have an account on this site or have left comments, you may request an exported file of the personal data we hold about you, including any data you have provided.

You may also request that we erase your personal data. This does not include data we are required to retain for administrative, legal, or security purposes.

Where Your Data Is Sent

Visitor comments may be processed through automated spam detection services.