JLR: Payroll data stolen in cybercrime that shook UK economy

"Jaguar Land Rover (JLR) has reportedly told staff the cyber-raid that crippled its operations in August didn't just bring production to a screeching halt - it also walked off with the personal payroll data of thousands of employees. The breach, which was pegged as one of the most costly in UK history, includes bank account details, tax codes, and other sensitive data related to staff salaries, benefits, and former employees. In an email to both current employees and former employees, seen by The Telegraph, JLR wrote: "While investigating, we have unfortunately identified that there has been unauthorised access to some personal data we process in the context of employment and some information needed to administer payroll, benefits and staff schemes to employees and dependents. This includes data of ex-JLR team members that has been stored.""

""From the ongoing forensic investigation, JLR believes that certain data related to current and former JLR employees, and contractors, was affected by the cyber incident. We remain in dialogue with the relevant regulators and we are in the process of contacting current and former employees and contractors as necessary.""

"The attack, which brought the company's manufacturing to a grinding halt for more than a month, has now led to a £1.5 billion drop in sales for JLR, with a further £196 million loss related to "exceptional items" linked to the breach. Beyond JLR's own balance sheet, the damage rippled outward: the Cyber Monitoring Centre has classed the incident as a systemic event that could cost the UK economy up to £2.1bn, while Office for National Statistics data shows motor vehicle manufacturing shaved 0.17 percentage points off GDP in September,"

A cyber-raid in August halted Jaguar Land Rover's manufacturing and resulted in unauthorised access to payroll and employment data for thousands of current and former employees. Stolen information reportedly includes bank account details, tax codes, salary and benefits data, and records used to administer staff schemes. JLR indicates ongoing forensic investigation and communication with regulators, while advising employees to remain alert for fraud and phishing despite no confirmed misuse so far. The incident caused a £1.5 billion drop in sales and a further £196 million exceptional loss for JLR, and may cost the UK economy up to £2.1 billion, with measurable GDP impact.

Read at Theregister