Lessons from the JLR Cyber Attack, Why Complete Cyber Security Requires More Than Just Technology.

Jaguar Land Rover (JLR) has now entered a second week of halted production following a major cyber incident. While official details remain limited, threat actor group Scattered Spider, also known as Muddled Libra, Octo Tempest, or UNC3944 has claimed responsibility via a Telegram channel, reportedly in collaboration with ShinyHunters and LAPSUS$.

The alleged exploit? Unpatched SAP NetWeaver vulnerabilities (CVE-2025-31324 and CVE-2025-42999). These were patched by SAP earlier in the year, but attackers moved quickly to exploit systems still left exposed.

Why the JLR attack matters 

This incident highlights some urgent lessons for every business: 

• Supply chain exposure is critical – A single vulnerability in widely used software can cascade across entire industries. 
• Social engineering is as dangerous as zero-days – Scattered Spider are well known for manipulating employees and service desks into handing over access. 
• Manufacturing is a prime target – Once viewed as a sector more exposed to espionage, manufacturers are now facing opportunistic ransomware and destructive cyber attacks. 

For UK businesses, particularly those in manufacturing and supply-chain heavy industries, the message is clear, cyber resilience can no longer be optional. 

At Hubtel IT, we’ve developed our Cyber-Hub solution to help organisations mitigate risk and achieve complete cyber confidence. It’s built on layered protection, covering technology, people, and recovery. 

Here’s what it includes: 

A review of your Disaster Recovery Planning (DRP) 

A disaster recovery plan outlines the policies, processes, and procedures needed to protect data and systems. 

Managed Gateway Security 

We remove the burden of managing and maintaining your gateway infrastructure by providing administration, monitoring, and ongoing support, keeping your front-line defences strong. 

Email Security 

Cyber criminals increasingly target inboxes. Our email security services safeguard your communications, ensuring confidentiality and integrity against evolving threats. 

Staff Awareness Training 

Your employees are the first line of defence. We provide engaging, practical training to help staff spot threats early and reduce the risk of human error leading to compromise. 

Penetration Testing 

We simulate attacks to identify vulnerabilities before cyber criminals do, working with you to eliminate weaknesses and strengthen resilience. 

Cyber Essentials 

This government-backed certification validates your cyber defences and unlocks access to inclusive cyber insurance through our Cyber-Hub. 

Dark Web Monitoring 

We proactively monitor for leaked or stolen business credentials, giving you the chance to act before attackers exploit exposed data. 

The JLR incident highlights that even global brands with sophisticated security strategies can fall victim to cybercrime. For smaller organisations, the risks are just as real if not greater given tighter budgets and fewer in-house resources. 

Hubtel IT plays an active role in strengthening cyber resilience across the region. As a member of the Advisory Board for the Cyber Resilience Centre for the West Midlands, we work closely with the police cybercrime unit and major organisations ranging from the Federation of Small Businesses to the NHS. 

By combining proactive protection, staff empowerment, and cyber insurance, our Cyber-Hub solution gives businesses the layered security they need to face today’s threats with confidence.

Jordan, our Technical Lead, is the go-to problem solver for all things IT. With years of experience in management and support, he loves turning complex challenges into simple, cost-saving solutions that keep systems running smoothly and people happy.

Known for his calm head and big ideas, Jordan brings energy and organisation to every project. He’s great at rallying teams, meeting tight deadlines and keeping things on track even when priorities shift.

A natural self-starter, Jordan thrives on new challenges, fresh tech and any opportunity to learn something new.