Desk live·
ForensicPost
Breaches/Manufacturing/File 25-1001b

A JLR Supplier Laid off Half Its Workforce During the Shutdown

One unnamed JLR supplier laid off forty staff — close to half its workforce — during the shutdown. It is the smallest organisation in this database and it has no file of its own.

Constructed geometry · not a chart of case data
TargetUnnamed JLR supplier
ActorScattered Lapsus$ Hunters
D. Kennedy11 min readConfidence: medium2 sources reviewed

Reporting during the shutdown recorded one unnamed Jaguar Land Rover supplier having already laid off forty people — described as almost half the company.

This Is What The Size Bias Looks Like From Inside

At 25-0613b this desk recorded that all five filters producing the public incident record select for organisation size, and that the corpus is therefore a survey of large organisations presented as a survey of a field.

A firm of roughly ninety people, halved by an incident at somebody else’s company, is exactly the organisation those filters exclude. It is unnamed, it has no notification duty, no class action, no securities filing, no research vendor writing it up.

It appears in this database only because a national manufacturer’s outage was large enough that journalists went looking for the downstream effects.

Forty Jobs Against £196 Million

The corpus records JLR booking £196 million in the affected quarter, at 25-0902, and a third-party estimate of £1.9 billion for the wider economy.

Those are the numbers that circulate. Forty people at one supplier is the number that describes what the £1.9 billion is made of, and it is the only such number this database contains.

And It Is Not A Data Breach By Any Definition

No personal data. No confidentiality failure. No attacker ever touched this company’s systems.

It is filed in a database of cyber incidents because the corpus’s position, set out at 26-0209 and repeated throughout, is that availability harm is the unmeasured half of the field. Graded medium: the firm is unnamed and the workforce figures are as reported.

How we reported this

Compiled from published reporting, listed below. The company is not named and the workforce size is as characterised in that reporting. Corrections: corrections@forensicpost.com.

Sources
  1. Jaguar Land Rover cyberattack is forcing layoffs at its suppliersAutoblog
  2. Supplier cash squeeze exposes fragility in JLR supply chainAM Online
D. Kennedy
Identity and access reporter. Former DFIR consultant. Signal on request.
// the chain of custody — tuesdays

Get the next file first.

One incident a week, taken apart properly. Logs, timelines, and what the filing left out.

PGP-signed edition · no tracking pixels · one-click unsubscribe
© 2026 ForensicPost Media · the desk · newsletter · searchGlossary