A JLR spokesperson said the extension was intended to provide clarity as the company plans a phased restart of production.
“Our teams continue to work around the clock alongside cybersecurity specialists, the NCSC and law enforcement to ensure we restart in a safe and secure manner,” the statement said.
The company added that its focus remains on supporting customers, suppliers, colleagues, and retailers, which remain open.
The cyberattack, believed to be a ransomware assault, has disrupted production at sites in the UK, China, Slovakia, Brazil, and India. JLR’s Indian operations, with a monthly capacity of 1,000 vehicles, have been affected, causing backlogs of three to eight months depending on the model. Dealers worldwide cannot register vehicles, order spare parts, or use diagnostic software.
More than 33,000 JLR employees in the UK have been affected. Assembly lines at Solihull and Halewood are operating minimal shifts while maintenance teams remain idle. The wider supply chain is also under pressure, with around 200,000 jobs at risk across hundreds of supplier companies.
About a quarter of suppliers have paused production and laid off staff, with further reductions expected. Mike Hawes, chief executive of the Society of Motor Manufacturers and Traders, warned that additional small and medium-sized suppliers may follow similar measures.
Government and cybersecurity authorities are involved in the recovery. Officials from the National Cyber Security Centre (NCSC) and Tata Consultancy Services (TCS) are coordinating the phased restart. Parliamentary figures have highlighted the vulnerability of UK businesses to cyberattacks, including threats from Russia, North Korea, and Iran.
Business Secretary Peter Kyle and Industry Minister Chris McDonald visited JLR on Tuesday, discussing support for the company and its supply chain. McDonald said the visit allowed the government to hear directly from business owners on how to restart production.
JLR, owned by India’s Tata Motors, has three UK factories producing about 1,000 cars per day. The company reportedly loses £50 million ($68 million) per week during the shutdown. Production supports 104,000 jobs in supply chains across the country. The Unite trade union has warned of potential job losses and called for government support to keep suppliers solvent.
JLR had not finalised a cyber insurance deal before the attack and appears to be uninsured, according to three senior cyber insurance market sources. The company declined to comment on insurance coverage.
The shutdown adds to broader concerns over high-profile cyberattacks. Recent incidents affecting airports and major UK businesses, including Marks & Spencer and Co-op, have highlighted the increasing risk to global operations.
Despite the disruption, JLR said it is preparing plans to resume production once systems are secure. Sources have indicated the disruption could last into November if recovery is delayed further.