Kevin BeaumontJaguar Land Rover have contained their network and stopped production after what appears to be a ransomware incident. VPNs and network border in UK all down.
Jaguar Land Rover moved their cybersecurity and IT functions to TCS two years ago 🫡
Jaguar Land Rover is ransomware, I can see network traffic from infrastructure used by multiple e-crime groups over the past week. I've asked one I think likely responsible if they did it.
They (JLR) appear to be doing contain to eradicate, i.e. all UK border services shut, Windows infrastructure offline etc.
Jaguar Land Rover latest from the outside looking in.
AS205756 aka JAGUAR LAND ROVER AUTOMOTIVE PLC is shut down - UK network only (however it hosts their most important infrastructure).
Staff have been told not to turn up to manufacturing facilities.
Tata Motors (parent company) appears to be online still but looks like a mess on Shodan, e.g. lots of SAP Netweaver boxes dangling directly off the internet.
JLR - network border all still offline. Liverpool Echo reports factory production still at all stop.
The lapsus$ guys are taking credit for the Jaguar Land Rover thing, speed run to see how many times they can get v&'d in 5 years.
I can see ecrime infrastructure was talking to this at JLR https://beta.shodan.io/host/185.193.35.39
It's a SAP Netweaver box. The Lapsus$ kids have been running around with a SAP exploit for a while, prior thread reference: https://cyberplace.social/@GossiTheDog/115005311849134541
The lapsus$ guys also posted this screenshot, on an internal Jaguar Land Rover SAP box last night.
Edit: thread broke, continues here: https://cyberplace.social/@GossiTheDog/115141860833884295
Alex@GossiTheDog imagine bragging about this being so easy when they probably bought the exploit with bitcoin.
T1- Push The Button@GossiTheDog well I’m glad I don’t have that shit hanging off my edge.
Rairii 
@GossiTheDog and now i'm wondering who the current holder of that record is
@GossiTheDog they must like the party van.
FashionProofv&'d ??
Alameals@GossiTheDog Any claimed responsibility for this yet?