Russian hackers linked to $2.5B Jaguar Land Rover breach

A major cyberattack on Jaguar Land Rover, which is one of the U.K.’s largest employers, has cost the British economy an estimated $2.5 billion, according to a report by The New York Times. The economic damage from the incident was severe enough to halt production for months and prompt the U.K. government to step in with a £1.5 billion bailout payment, which is worth around $2 billion. For months, the identity of the perpetrators was subject to speculation. The New York Times reported that Russian hackers were behind the breach of the automotive manufacturer. However, it remains unclear if the hackers were working directly for Vladimir Putin’s government, were independent criminals, or a mix of both, such as criminals operating with the government’s tacit approval.

The investigation into the incident involved multiple cybersecurity firms and government agencies. According to The New York Times, Microsoft tracked the hacking group and alerted Jaguar Land Rover to the identities of the hackers. Other public sector organizations that worked on the investigation included the FBI (the US federal law enforcement agency), the U.K.’s National Crime Agency, and the National Cyber Security Centre. Private sector firms also assisted in the probe, including Palo Alto Networks and Mandiant, which is Google’s cybersecurity unit. Each of these organizations and companies worked to investigate the breach of the automotive manufacturer’s networks. Microsoft’s tracking of the group allowed it to alert Jaguar Land Rover to the identities of the hackers, while the other agencies and firms, including the FBI, the National Crime Agency, the National Cyber Security Centre, Mandiant, and Palo Alto Networks, all contributed to the investigation of the incident. These entities worked to investigate the breach and identify those responsible.

In a rare but not unprecedented development in cybersecurity investigations, the Russian group was reportedly not the only entity to infiltrate the company’s systems. The New York Times reported that a Jordanian hacker known as Rey had also breached some JPL networks.

Why it matters

The cyberattack on Jaguar Land Rover caused production to halt for months and resulted in significant economic damage, prompting a £1.5 billion government bailout.