Jaguar Land Rover has just announced that it is slashing up to 4,000 jobs over the next two years. The company's own explanation points to cheaper Chinese rivals, US tariffs and an expensive pivot upmarket. There's another factor in the mix that gets less attention outside this industry: a cyber insurance policy that never got signed.
In September 2025, JLR was mid-negotiation on a cyber policy through broker Lockton when hackers hit. The deal wasn't finished in time. When the carmaker's UK factories went dark for five weeks from 1 September, Insurance Business broke the news that there was no policy in place to absorb any of the fallout.
JLR has booked the cyber costs itself, quarter by quarter. £196 million of exceptional costs appeared in its results for the quarter to September 2025, followed by another £64 million the quarter after. By February 2026, the running total for the incident had reached close to £260 million, on top of a separate £42 million bill for voluntary redundancies. None of the £260 million has come back through an insurer, because there wasn't one on the hook.
Marks & Spencer's experience makes the difference between having cover, and not having cover clear. M&S was hit by the same hacking network only months earlier. Its cyber policy, arranged by WTW with Allianz as lead carrier, allows for a claim of up to £100 million against a total profit hit it put at £300 million. JLR had no such backstop.
Same criminal network, similar scale of disruption, a very different outcome on the balance sheet.
Read next: Jaguar Land Rover hit by cyber attack
With no insurer absorbing the loss, the government stepped in to stop the wider supply chain going under. Business Secretary Peter Kyle announced a £1.5 billion loan guarantee through UK Export Finance's Export Development Guarantee, calling the attack "an assault on an iconic British brand." The guarantee was needed because around 120,000 supply chain jobs, on top of JLR's own 34,000 UK employees, were sitting behind a company that had just taken a nine-figure hit with no policy to soften it.
It kept suppliers going. It also meant a cyber failure that should have been a matter for the insurance market ended up on the government's books instead.
The UK's Cyber Monitoring Centre later put the total economic cost of the shutdown at up to £1.9 billion, the most damaging cyber incident on record in this country. Ciaran Martin, who chairs the CMC's technical committee, told an industry event in March that the bailout set "an unfortunate precedent" because ministers had intervened "in a case-specific way... without clear criteria."
Pool Re's Tracy Poole made a related point at the same event: the cyber protection gap for losses of this size can run as high as 90%, because damage that spreads into supply chains and local economies is exactly what insurers currently struggle to price.
That gap isn't unique to large corporates, either. The government's Cyber Security Breaches Survey has previously put the share of UK businesses without any cyber cover above 50%, and JLR's case shows what that figure looks like when it lands on a company this size.
Chery's Jaecoo and Omoda brands have outsold Land Rover in the UK this year, according to Society of Motor Manufacturers and Traders figures, with the Jaecoo 7 nicknamed the "Temu Range Rover" for undercutting it on price. Add US tariffs and an expensive relaunch of Jaguar around six-figure electric models, and JLR chief executive PB Balaji has plenty to point to that has nothing to do with insurance.
But the timing matters. The uninsured attack landed in the same window as all of that, took roughly a quarter of a billion pounds straight off the balance sheet with no recovery mechanism, and added to the pressure behind the "simplify, cut costs, build resilience" language now being used to justify 4,000 redundancies.
Joanna Grant, managing partner at Fenchurch Law, made a similar point in an Insurance Business interview on the wider lessons from JLR and M&S: "One would have expected an organisation of that size and sophistication to have its ducks in a row." She saw the gap less as a deliberate choice to self-insure and more as a governance failure that went unnoticed until it cost hundreds of millions.
A lapsed or half-finished renewal at a company this size doesn't just hit one balance sheet. It cascades into thousands of jobs, hundreds of suppliers and, eventually, a taxpayer-backed loan. Business Secretary Jonathan Reynolds has since has announced joint talks with Balaji and Unite general secretary Sharon Graham, who says government and unions will "leave no stone unturned" to protect the workforce. Those talks look different if a signed cyber policy had been sitting on JLR's desk in August 2025.
A few practical points stand out for brokers advising manufacturers on cover:
Read next: Trade credit insurance gains ground as UK factories face cash-flow strain
