Jaguar Land Rover Data Breach (2025)
The 2025 Jaguar Land Rover data breach resulted from an unauthorized actor accessing certain JLR systems on August 31, 2025. The incident disrupted global operations and affected some information relating to employees and their dependents.
The organization has not published how many were affected, so the incident cannot be placed on this scale.
Exposed Data Types
1 sensitive5- Health insurance information
- Social security numbers
- Government issued IDs
- Passport numbers
- Driver's licenses
About This Breach
Jaguar Land Rover Limited is a UK-based automotive manufacturer and part of the Tata Motors group. The total number of affected people was not disclosed; Massachusetts's official record confirms two affected residents of that state.
How Did the Incident Occur?
JLR shut down certain systems as a precaution and began investigating with cybersecurity specialists, the UK National Cyber Security Centre, and law enforcement. In its September 6 statement, the company said it was continuing to restart global applications in a controlled manner.
What Information Was Affected?
The information varied by individual and may have included Social security numbers, non-US national identification numbers, passport numbers, driver's license numbers, and health-insurance numbers. The data was held in records used to administer employment, payroll, benefits, and staff programs.
How Did Jaguar Land Rover Respond?
JLR said it implemented additional protocols to protect its network, internal systems, and applications and continued supporting law enforcement's investigation. The company reported no evidence that the information had been made public or misused as of the notice date and offered eligible people 24 months of credit monitoring and fraud assistance.
What Should Affected People Do?
Notice recipients should review credit reports and health-insurance activity and use strong, unique passwords for their accounts. Unexpected links, attachments, or requests for credentials referring to JLR or support services should be verified through official channels.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
