JLR cyber disruption

What the 2025 shutdown tells us about financial distress, supply-chain risk and early action.

The cyber incident affecting Jaguar Land Rover (JLR) in 2025 caused immediate concern across the Midlands. Production stopped, suppliers lost orders, and cashflow came under pressure. There were warnings that the disruption could result in widespread financial distress, not only for businesses supplying JLR directly but also for those further down the supply chain.

Those concerns were understandable. The automotive sector is an important part of the Midlands’ economy, and many suppliers operate on tight margins, carry significant fixed costs and depend on regular orders and prompt payment. A prolonged shutdown at a customer of JLR’s size had the potential to move quickly from an operational problem to a cashflow and insolvency issue.

What happened at JLR?

JLR stopped production after a cyber incident on 31 August 2025 affected its systems. Manufacturing at Solihull, Wolverhampton and Halewood was suspended, with the impact quickly passing through to logistics businesses, dealerships and a large supplier network.

JLR would ordinarily produce more than 1,000 vehicles each day. When production stopped, many suppliers saw demand reduce almost immediately. For businesses dependent on JLR work, the practical problem was not simply lost profit. It was whether they had enough cash to continue paying employees, HMRC, lenders and other suppliers while orders were suspended.

How exposed was the Midlands?

The Midlands’ exposure was significant. JLR’s operations support an extensive regional network of manufacturers, logistics providers and specialist service businesses. The shutdown affected businesses both within and outside JLR’s direct supply chain.

The impact was also felt beyond JLR’s direct suppliers. Automotive supply chains are complex and include transport providers, labour agencies, tooling businesses, technology companies and smaller manufacturers supplying other suppliers. A business did not need to have a contract with JLR to be affected by the shutdown.

Did this lead to widespread financial distress?

There was clear evidence of financial pressure. A snap survey conducted by the Greater Birmingham Chambers of Commerce, Coventry and Warwickshire Chamber of Commerce and Black Country Chamber of Commerce received responses from 84 businesses employing nearly 30,000 people. It found that more than three-quarters had been negatively affected. Some 45% reported a negative financial impact, including lost revenue and increased costs.

However, the available evidence does not show the immediate wave of insolvencies that had been feared. Many businesses first responded by reducing overtime, agency labour and working hours. Those steps can protect short-term cash flow, although they do not provide a permanent solution if disruption continues.

What action did the government take?

On 28 September 2025, the government announced an Export Development Guarantee expected to unlock up to £1.5 billion of commercial lending for JLR over five years. The intention was to improve JLR’s liquidity and help protect a wider supply chain employing around 120,000 people, many of them working for SMEs.

Did the support prevent a supply-chain crisis?

The guarantee was not a direct payment to affected suppliers and there remained concern about whether support would reach smaller businesses quickly enough. However, it gave JLR access to further liquidity at an important time. JLR also restored its systems and supplier-payment arrangements in stages, before beginning a controlled restart of production in early October.

Crowe was actively engaged with the manufacturing sector throughout the disruption. A Crowe webinar heard directly from businesses concerned that liquidity was not reaching SMEs in the lower tiers quickly enough. Crowe also highlighted the risk that support could become concentrated at the top of the supply chain, leaving smaller suppliers and ancillary businesses without sufficient cash to meet wages, rent and other fixed costs. Crowe called for targeted, independently administered support capable of reaching viable businesses before short-term liquidity pressure became a solvency issue.

What are the lessons for directors?

The JLR incident shows how quickly a problem affecting a major customer can place pressure on otherwise viable businesses. Directors should understand the company’s exposure to key customers, maintain reliable short-term cash-flow forecasts and consider what would happen if orders or payments stopped for several weeks.

Warning signs include stretched creditor days, unpaid tax liabilities, exhausted funding facilities, reduced credit-insurance cover and an inability to meet payroll without new orders being received. Where those issues arise, the worst approach is to wait and assume that trading will quickly return to normal.

Early engagement with lenders, HMRC, customers, major suppliers, and a licensed insolvency practitioner can create time and preserve options. Once cash has run out or creditor action has started, the choices available to directors can become far more limited.

Building a more resilient supply chain

Businesses cannot remove every external risk, but they can reduce the impact of a major customer, supplier or systems failure. The starting point is to identify critical dependencies across customers, suppliers, logistics, technology and funding, including exposures beyond the first tier.

• Diversify concentration risk: Review reliance on individual customers, sectors and suppliers. Developing alternative customers and approved sources of supply may take time but can prevent one disruption from stopping the business.
• Map critical dependencies: Understand which components, subcontractors, systems and transport links are essential, how quickly disruption would be felt and where viable substitutes exist.
• Protect liquidity: Maintain rolling short-term cash-flow forecasts, test scenarios in which orders or payments stop, preserve headroom and agree funding before it is urgently needed. Stock buffers can provide operational protection but should be balanced against the cash they absorb.
• Plan for operational disruption: Put practical continuity arrangements in place for alternative production, logistics, staffing and communications, with clear responsibilities and regular testing.
• Strengthen cyber resilience: Treat cyber risk as a board issue, assess the security of key suppliers, set proportionate contractual standards and ensure incident-response plans cover the failure of a major customer or connected system.
• Monitor and act early: Track customer payment behaviour, order volumes, supplier performance, covenant headroom and credit-insurance cover. Escalation triggers should be agreed in advance so that directors engage with stakeholders and advisers while options remain available.

Resilience is not simply about holding more stock or buying more insurance. It requires a realistic understanding of where the business could fail, what warning signs would appear and which actions management could take quickly. For smaller suppliers in particular, early planning and early advice can make the difference between absorbing a temporary shock and allowing it to become a solvency problem.

What happened in the end?

The supply chain did experience substantial distress, including reduced hours, redundancies and pressure on businesses outside JLR’s direct supplier base. However, the feared immediate regional insolvency crisis did not materialise. Government-backed funding, the restoration of supplier payments and the phased restart of production appear to have limited the short-term impact.

That does not mean the risk was overstated. Formal insolvency is often a delayed outcome, and it can be difficult to identify whether a later failure was caused by one event. The better conclusion is that the shutdown created genuine and widespread financial pressure, but action was taken before that pressure developed into a systemic failure of the supply chain.

The recent announcement of a voluntary redundancy programme at JLR provides a further reminder that the effects of the disruption did not end when production resumed. While the cyber incident did not result in the immediate wave of insolvencies that many feared, it formed part of a broader set of pressures facing the business, including weaker market conditions, international competition, tariffs and wider industry challenges. The result is that restructuring and cost reduction measures are still being felt across the sector more than a year later. JLR has confirmed that it is opening a voluntary redundancy programme for salaried and management employees as part of wider efforts to improve efficiency and resilience.

In many respects, this supports the concerns raised by Crowe during the disruption. At the time, we repeatedly highlighted the risk that the true impact would emerge months after the initial shutdown, as lost revenue, delayed orders and cashflow pressures worked their way through the supply chain. Crowe's concern was not limited to direct suppliers, but extended to lower-tier manufacturers, transport businesses and other ancillary operators whose financial difficulties would take longer to become visible. The latest developments suggest that, while a systemic collapse was avoided, the economic consequences for parts of the automotive ecosystem have proved more persistent than many initially expected.

How can Crowe help?

At Crowe, we have a team of experienced and licensed Insolvency Practitioners who can review a company’s financial position, help directors understand their duties and advise on the restructuring or insolvency options available. Early advice is important. The sooner the position is reviewed, the more options there are likely to be to protect the business, preserve value and reduce the risk of avoidable personal exposure. Please get in touch with your usual Crowe contact.