House of Commons · Urgent Question
09 September 2025 · 25 other contributors
Opened by Derek Twigg Lab Widnes and Halewood
Summarised by AI from the official record, so it can contain mistakes.
Derek Twigg raised concerns about jaguar land rover cyber-attack 2025-09-09 in the House of Commons. A government minister responded. Other MPs also contributed.
Key points
MPs spoke in turn to share their views and ask questions. Here's what each person said.
Opened the debate
Will the Minister confirm what assistance the Government are giving to Jaguar Land Rover following the cyber-attack that has halted production, affected thousands of jobs in the supply chain, and raised wider concerns about the nation's cyber-security? The MP wants clarity on government actions and future protections for businesses.
Question
The MP expressed disappointment over a lack of statement from the government about actions taken to assist JLR despite the cyber-attack occurring over a week ago. He raised concerns about wider implications for UK businesses and national security if attacks continue.
Minister reply
The Minister acknowledged Jaguar Land Rover's significance as an employer in the UK, emphasising that every company should take cyber-security seriously. He mentioned bringing forward a Bill on this issue soon as stated in the King’s Speech, and highlighted Richard Horne’s stress on hostile activity in cyberspace.
Question
The shadow Minister sought details about when NCSC was informed of the attack, types of support available to JLR, expected timeline for resolution, preventive measures against future attacks, and progress in identifying the attackers.
Minister reply
The Minister confirmed NCSC engagement since last Wednesday. He clarified that while a specific timeline cannot be provided due to ongoing nature of the situation, local MPs will have an opportunity for Q&A with JLR on Friday morning. The Home Office has undertaken consultation on ransomware policy this summer.
Question
The MP questions whether all lessons from the M&S cyber-attack have been learned and if the state will provide JLR with adequate support to recover and prosecute those responsible.
Minister reply
The Minister acknowledges that lessons from the M&S case are being applied but avoids making immediate connections due to ongoing investigations. He commits to ensuring a cross-Government approach, active engagement in discussions, and providing necessary assistance to companies like JLR.
Question
The MP asks about the Government's efforts to restore public trust in UK cyber-security networks and whether the attacks are from overseas.
Minister reply
The Minister responds by noting that similar cyber-attacks are widespread globally, including major incidents at companies like Qantas, Pandora, and Adidas. He emphasises the importance of prosecuting those responsible and ensuring international cooperation.
Question
The MP inquires about steps the Government is taking to ensure a quick resolution to the JLR cyber-attack crisis, given its economic and national security implications.
Minister reply
The Minister commits to coordinating support for suppliers affected by the attack and ensuring that MPs get updates on the situation. He plans to meet with JLR's chief executive to discuss further measures.
Question
The MP questions about Government work concerning national digital ID cards in light of potential vulnerabilities due to cyber-attacks.
Minister reply
The Minister acknowledges the need for secure data management if a national digital ID card is introduced, ensuring safety and security in such initiatives.
Question
The MP asks about steps being taken to strengthen national cyber-security and improve prevention and intelligence-sharing with businesses and charities.
Minister reply
The Minister discusses the importance of mandatory reporting for ransomware incidents and indicates support for further measures to enhance security.
Question
The MP seeks reassurance that lessons learned from previous cyber-attacks have been applied, particularly in terms of dialogue between the Government and affected businesses.
Minister reply
The Minister commits to ensuring a strong working relationship with businesses, including JLR, through direct engagement and support.
Question
The MP inquires about the confidence of contingency plans for critical national infrastructure when dealing with cyber-attacks.
Minister reply
The Minister acknowledges the severity of cyber-attacks and commits to a robust approach, ensuring that businesses can flourish despite such threats.
Question
The Minister mentioned WHS Plastics in his constituency, with 2,000 employees and eight plants. The MP asks for full help from all relevant agencies and maximum transparency to reassure staff.
Minister reply
All agencies will be engaged fully. I am happy to have a call with the chief executive of WHS Plastics later this week.
Question
What action is being taken to protect businesses and supply chains from ransomware and cyber-attacks?
Minister reply
The NCSC has been involved since last Wednesday. There are online aids available for companies to improve their protection against such attacks.
Question
Can the Minister reassure constituents that this Government will give the NCSC all necessary resources, and have there been any requests for financial support?
Minister reply
The NCSC has all necessary resources. I am happy to work with MPs to provide reassurance to constituents.
Question
Can the Minister assure that steps are being taken to identify areas of critical national vulnerability in both public and private sectors?
Minister reply
Yes, we do take such steps. The Government is focused on ensuring better protection and reporting of incidents.
Question
What more can the Minister and the state do to support businesses with robust defences against foreign state actors?
Minister reply
The Government is supporting businesses with robust defences. All businesses can get a certificate for cyber-essentials to protect themselves better.
Question
Have the Government considered extending Pool Re insurance scheme to cover cyber-incidents?
Minister reply
I do not have an immediate answer, but will write to the MP with a response.
Question
Will the Minister look again at provisions of Computer Misuse Act 1990 to update it for modern cyber-security needs?
Minister reply
The Government will introduce a new cyber Bill as stated in the King’s Speech.
Question
The Minister is congratulated on his new role. The MP looks forward to welcoming the new AI and cyber Minister.
Minister reply
Thank you for your congratulations.
Question
Does he accept there are broadly three categories of hacker: show-offs, wreckers working on behalf of hostile countries or political ideologies, and extortionists. In every case, though, is the Minister satisfied that so many Government services dealing with personal data insist people go online to supply that data to government?
Minister reply
The right hon Gentleman makes a very good point about personal data. When I was the data Minister, that was one of the things I was trying to push very strongly—there is no point in trying to get people to give data if it is not then secure. That does not just apply to Government; it applies across all sorts of different companies.
Question
Agrees with Members who have raised concerns about the impact this cyber-attack might have on jobs and reputation. I do not expect that will be the last attack but risks to automotive companies are particularly acute given cars becoming computers on wheels. Is the UK increasingly a target?
Minister reply
No, every country in the world is increasingly susceptible, not just the UK. This is a growing business, and the worst thing we could do would be to feed that business model.
Question
Fundamentally this is a question about resilience across British industry. These attacks are costing millions of pounds a day. What are the Government doing to facilitate knowledge-sharing within industry?
Minister reply
The hon Member is right—every single Member of the House will have had some kind of attempted cyber-attack, whether that is phishing or vishing or whatever it may be on their mobile phones.
Question
Welcomes Minister to his role and asks for reassurance and advice given businesses and charities reliant on internet for sales, trade and human resources services worried about being next victims of such attacks
Minister reply
Every organisation in the country should be considering whether they might be under attack. It is possible that there might already have been an attempted attack.
Question
Cyber-security costs rarely taken into account by companies but for a company such as JLR with profit margins can absorb costs. SMEs do not have that luxury and often hold personal and financial data. Government should assist businesses to ensure industry-standard security
Minister reply
The hon Member is absolutely right that it is not just about big companies, listed companies or big organisations in the public sphere; it is also about much smaller ones which may have all sorts of different attacks.
Question
Minister talked about a cross-Government approach. Can he comment on collaboration between officials at the Department for Business and Trade and those working in this area in the MOD?
Minister reply
The primary relationship is between my Department, because we have responsibility for businesses and making sure that they can prosper in the future, the Department for Science, Innovation and Technology, as represented by my hon Friend here.
Question
Cyber-attacks on Marks & Spencer and Co-op left many people concerned about security of information online. This attack on Jaguar will heighten concerns, businesses in his constituency have told him. What discussions held with Cabinet colleagues?
Minister reply
In fact, the first of these big cyber-attacks was on the British Library which is an arm’s length body of the Department for Culture, Media and Sport so some of these lessons were taught immediately to Government.
Government Response
The Minister acknowledged the anxiety felt by employees at Jaguar Land Rover and its supply chain. He stated that the Government and the National Cyber Security Centre are engaging with JLR on a daily basis to understand challenges faced by the company and its suppliers, and they will provide support as soon as possible. Despite limitations in specifics due to ongoing investigations, he outlined key actions including the Product Security and Telecommunications Infrastructure Act 2022, software security code of practice, AI cyber-security code of practice, cyber governance code of practice, cyber essentials scheme, and a range of free tools from NCSC. He also mentioned the intention to introduce the cyber-security and resilience Bill in future parliamentary sessions.