A group of young English-speaking hackers has claimed responsibility for a cyber attack that has disrupted the global production lines of Jaguar Land Rover. Known as the Scattered Lapsus$ Hunters, the gang has posted on the messaging app Telegram, sharing screenshots that appear to originate from within the car maker’s IT networks. This group also has a history of attacks on UK retailers, including Marks and Spencer earlier this year.

Jaguar Land Rover is aware of the claims and has commenced an investigation into the incident. Initial reports indicate that the hackers may be attempting to extort money from the company; however, they have not confirmed whether they successfully stole private data or introduced malicious software into the network. A security expert has expressed concern that the gang seems to have accessed sensitive internal information.

Production at various Jaguar Land Rover sites, including the Halewood plant in Merseyside and one in Solihull, has been heavily disrupted since the attack was discovered on Sunday. Staff have been sent home as the company works swiftly to restore manufacturing. While Jaguar Land Rover has taken immediate measures to mitigate the incident, stating that they proactively shut down their systems, they have not detailed the specifics of the attack.

The hackers’ Telegram channel, which has nearly fifty-two thousand subscribers, reflects the merging of various youth-oriented cybercriminals affiliated with an entity known as The Com. The group merges members from notorious hacking factions such as Shiny Hunters, Lapsus$, and Scattered Spider. Earlier in the year, the National Crime Agency warned of the rising threat from cyber criminals linked to The Com. Following previous attacks, arrests were made; however, the suspects were released on bail. As the investigations into this latest attack continue, the Information Commissioner’s Office is assessing the situation for further developments.