HackingIDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNTMediumContained
Jaguar
bd_32fe25d3d581b16a · schema v1 · pii pii-v1
Full breach record for Jaguar →Jaguar Land Rover Limited (JLR) notified Massachusetts and other state residents of a cybersecurity incident discovered on August 31, 2025. An unauthorized actor accessed JLR systems, compromising employee and dependent data including SSNs, national IDs, passport numbers, driver's license numbers, and health insurance numbers. JLR shut down systems, engaged third-party experts, NCSC, and law enforcement. Affected individuals received 24 months of credit monitoring via Cyberscout (TransUnion). Notification was sent July 23, 2026.
Massachusetts clock✗ MA AG >90d43 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1213-jaguar-land-rover-limited-jlr/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- 0f5ef41a5e5fed0d610860b137a93b699d8a91485f63746b8a24344aabbb98ba
Reporting entity
- Name
- Jaguarnorm: jaguar
- Domain
- jaguar.com
Victim entity
- Name
- Jaguarnorm: jaguar
- Domain
- jaguar.com
Incident
- Discovered
- Aug 31, 2025
- Materiality determined
- —
- Notification sent
- Jul 23, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- worked alongside the UK Government's National Cyber Security Centre (NCSC) and law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 43 weeks(304 days from discovery to filing)
- Compliance flags
- MA AG >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.