Staff of Jaguar Land Rover (JLR) have been told to stay home for a further day, Sky News understands, as the carmaker struggles to recover from a cyber attack.
Employees of the British company have now been told to remain off work until Wednesday. Previously, workers were directed not to return until Tuesday.
A decision on whether to bring staff back or not is being taken day by day, Sky News understands.
Money blog: One thing you should never have on your CV
JLR shut down its systems when it noticed the cyberattack on Tuesday last week, saying it had been “severely disrupted”.
Its retail activities were also impacted, but there was no evidence at the time that “any customer data has been stolen”, though JLR is reported to have flagged the risk of a data breach to the Information Commissioner’s Office.
Thousands of production staff at the UK’s largest car manufacturing sites in Halewood, Merseyside, and Solihull and Wolverhampton in the West Midlands are still being paid.
Jaguar Land Rover is the UK’s latest major company to face a cyber incident, after Marks & Spencer had its operations disrupted for months.
After an attack over Easter, the high street chain only resumed click and collect services in August.
Attacks on the Co-op and Harrods were detected more swiftly, had less of an impact.
Please use Chrome browser for a more accessible video player
Jaguar Land Rover paused shipments to the US in April in response to President Trump’s new tariffs. A US-UK deal was subsequently agreed.
Reporting from The Sunday Times said JLR operations could be disrupted for “most of September” or worse.
On Wednesday, a group of English-speaking hackers claimed responsibility for the JLR attack via a Telegram platform called Scattered Lapsus$ Hunters, an amalgamation of the names of hacking groups Scattered Spider, Lapsus$ and ShinyHunters.
Scattered Spider, a loose group of relatively young hackers, were behind the Co-Op, Harrods and M&S attacks.
JLR suppliers Evtec, WHS Plastics, SurTec and OPmobility have had to temporarily lay off staff, impacting roughly 6,000 workers.
A spokesperson for JLR said on Monday: “We continue to work around the clock to restart our global applications in a controlled and safe manner.
“We are working with third-party cybersecurity specialists and alongside law enforcement.
“We are very sorry for the disruption this incident has caused. Our retail partners remain open and we will continue to provide further updates.”
