--- title: What the Attack on JLR Teaches Us About OT Resilience description: Learn what the Jaguar Land Rover cyberattack reveals about OT security and cyber resilience. image: https://blog.easi.net/hubfs/JLR%20Hack%20-%20EN.png --- [![Home](https://blog.easi.net/hubfs/easi-logo.svg)](https://easi.net) Hit enter to search - [All](https://blog.easi.net/en) - [Adfinity](https://blog.easi.net/en/tag/adfinity) - [Cloud](https://blog.easi.net/en/tag/cloud) - [Easi](https://blog.easi.net/en/tag/easi) - [Microsoft](https://blog.easi.net/en/tag/microsoft) - [Rooftop](https://blog.easi.net/en/tag/rooftop) - [Security](https://blog.easi.net/en/tag/security) - [SmartSales](https://blog.easi.net/en/tag/smartsales) - [Spoom](https://blog.easi.net/en/tag/spoom) [Go back to the blog](https://blog.easi.net/en?hsLang=en) # [What the Attack on JLR Teaches Us About OT Resilience](https://blog.easi.net/en/what-the-attack-on-jlr-teaches-us-about-ot-resilience) [![Author Avatar](https://blog.easi.net/hubfs/GNEY.png) Gerrit Neyrinck Expert Security Engineer](https://blog.easi.net/en/author/gerrit-neyrinck) On September 1st, England’s largest auto manufacturer **Jaguar Land Rover (JLR)** disclosed that it had been hit by a **cyber attack**. Soon after disclosure, the company was forced to halt production across several factories worldwide as the damage began to ripple into every part of its operations. One of our trusted partners **Claroty** recently wrote [an insightful piece](https://claroty.com/blog/5-security-takeaways-from-the-jaguar-land-rover-cyberattack) analyzing this incident. Gerrit Neyrinck, Expert Security Engineer at Easi, recaps the main takeaways and shares his own perspective on what this means for Operational Technology (OT) Security. ### Understanding the Incident The attack is believed to have been carried out by a threat group that infiltrated JLR’s systems months before detection, using **phishing emails** and **social engineering** to gain access. Once inside, the attackers quietly moved laterally across both IT and OT environments, compromising critical systems and supplier connections. The impact was significant: the attack halted production, delayed deliveries, and amounted to millions in operational losses. This event demonstrates how a single compromise in **Operational Technology (OT)** environments can disrupt the entire production chain. ### 1. Visibility Is the Foundation of OT Security We often hear: "You can’t protect what you can’t see." In many industrial networks, visibility into all connected devices remains limited, from **programmable logic controllers (PLCs)** to **IoT sensors** . This blind spot allows attackers to move undetected for long periods. A strong **OT Security strategy** starts with full asset discovery and continuous monitoring. Together with our partner Claroty, we help organizations gain complete visibility across their **IT, OT, and IoT** environments, allowing faster detection and response to threats. ### 2. Network Segmentation Limits the Blast Radius Flat, unsegmented networks are a hacker’s dream. Once attackers gain access, they can move freely across systems. Implementing **network segmentation** divides your infrastructure into isolated zones, ensuring that a breach in one area doesn’t spread throughout the production environment. For manufacturers, this means separating production lines, administrative systems, and external vendor access. Proper segmentation drastically reduces the scope and cost of any incident. ### 3.Adopt a Zero Trust Mindset A dogma among cyber security experts, and cases like the JLR cyber attack these show its merit, is to always assume a breach: "Trust no one. Verify everything." In today’s connected world, **Zero Trust architecture** has become essential. It’s no longer enough to trust devices or users because they’re “inside the network.” Every identity, device, and connection should be verified continuously. Applying **multi-factor authentication (MFA)**, **least privilege access**, and strong authentication controls can prevent unauthorized lateral movement. For organizations with remote engineers or external suppliers, Zero Trust principles are critical to maintaining control and accountability. ### 4. Measure and Improve Your Cyber Resilience When a cyber attack occurs, recovery speed matters as much as prevention. **Mean-Time-to-Repair (MTTR)**, the time it takes to isolate, contain, and recover from an incident, is a key metric for measuring **cyber resilience**. Simulating real incidents, documenting clear recovery procedures, and ensuring your IT and OT teams are aligned can significantly reduce downtime. Practicing your response plan is just as important as having one. ### 5. Secure Your Supply Chain The JLR incident also impacted suppliers and third parties connected to its network. This highlights the growing importance of **third-party risk management**, especially in the context of the **NIS2 Directive**. Under **NIS2**, organizations are explicitly required to assess and manage cybersecurity risks within their **supply chain and service providers**. That means verifying who connects to your network, under which conditions, and how their access is monitored. Implementing **temporary credentials**, **least-privilege principles**, and **continuous monitoring** for vendors helps meet these NIS2 obligations while minimizing exposure. Because even if your internal security posture is strong, a weak supplier connection can still bring your operations to a halt. ### Final Thoughts The Jaguar Land Rover cyber attack is a powerful reminder that cybersecurity is no longer just an IT issue, but, all the more, a **business continuity issue**. For industrial organizations, protecting the production environment means protecting the company’s core. At Easi, we help companies strengthen their **cyber resilience** by combining our expertise with the technology of trusted partners like **Claroty**. Together, we provide complete visibility, advanced threat detection, and proactive defense across IT, OT, and XIoT environments, ensuring your operations stay safe, secure, and uninterrupted. #### About Claroty **Claroty** secures the **Extended Internet of Things (XIoT)** to deliver unmatched visibility, protection, and threat detection across all cyber-physical systems, including **OT**, **IoT**, **BMS**, and **IoMT**. Their mission is to empower organizations to confidently manage and protect the systems that keep operations running safely, continuously, and efficiently. [![NIS2 whitepaper](https://no-cache.hubspot.com/cta/default/473564/8e2ad46d-2112-47f9-98b1-49e70e3a83a8.png)](https://cta-redirect.hubspot.com/cta/redirect/473564/8e2ad46d-2112-47f9-98b1-49e70e3a83a8) [Easi](https://blog.easi.net/en/topic/easi?hsLang=en) [Security](https://blog.easi.net/en/topic/security?hsLang=en) [Business Continuity](https://blog.easi.net/en/topic/business-continuity?hsLang=en) [cybersecurity](https://blog.easi.net/en/topic/cybersecurity?hsLang=en) [OT security](https://blog.easi.net/en/topic/ot-security?hsLang=en) ## Current job openings We are constantly looking for new colleagues! If you share our values and you're looking for a challenging job in Belgium's Best Workplace, visit our website. [Apply now](https://easi.net/en/jobs) ### Get our top stories in your inbox every month ## Follow us [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/easi.net) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](https://www.linkedin.com/company/easi) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/easi_net) ## Recent posts ![Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%286%29-1.png) ### [Microsoft 365 Copilot Cowork: From AI Assistant to AI Coworker](https://blog.easi.net/en/solutions/microsoft/copilot-cowork-is-now-available?hsLang=en) 14/10/2025 ![Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/hubfs/Copilot%20Cowork%20is%20now%20available%20-EN%20%283%29.png) ### [Microsoft 365 Archive goes file-level: how to cut SharePoint storage costs from July 2026](https://blog.easi.net/en/solutions/microsoft/m365-archive-file-level?hsLang=en) 14/10/2025 ![GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/hubfs/GRC%20in%20Belgi%C3%AB%20-%20Protect%20-%20EN%20%281%29.png) ### [GRC in Belgium: Why PROTECT Is Where Insight Becomes Action](https://blog.easi.net/en/solutions/security/grc-in-belgium-why-protect-is-where-insight-becomes-action?hsLang=en) 14/10/2025 ## Share this article [![Share on Facebook](https://static.hubspot.com/final/img/common/icons/social/facebook-24x24.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.easi.net%2Fen%2Fwhat-the-attack-on-jlr-teaches-us-about-ot-resilience%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on LinkedIn](https://static.hubspot.com/final/img/common/icons/social/linkedin-24x24.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fwhat-the-attack-on-jlr-teaches-us-about-ot-resilience%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on Twitter](https://static.hubspot.com/final/img/common/icons/social/twitter-24x24.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.easi.net%2Fen%2Fwhat-the-attack-on-jlr-teaches-us-about-ot-resilience%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.easi.net%2Fen%2Fwhat-the-attack-on-jlr-teaches-us-about-ot-resilience%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=What%20the%20Attack%20on%20JLR%20Teaches%20Us%20About%20OT%20Resilience) ### Never miss our stories ## Related articles [See all blog articles](https://blog.easi.net/en/tag/easi) ![Easi & Anidris: A shared ambition to become your 360° IT partner](https://blog.easi.net/hubfs/Design%20sans%20titre%20%2813%29.png) ### [Easi & Anidris: A shared ambition to become your 360° IT partner](https://blog.easi.net/en/easi-anidris-a-shared-ambition-to-become-your-360-it-partner?hsLang=en) The merger between Easi & Anidris marks a new milestone in Luxembourg’s IT sector, combining... [Read more](https://blog.easi.net/en/easi-anidris-a-shared-ambition-to-become-your-360-it-partner?hsLang=en) ![AI in Belgian SMEs: from experimentation to real impact](https://blog.easi.net/hubfs/AI%20in%20Belgian%20SMEs%20-%20EN-1.png) ### [AI in Belgian SMEs: from experimentation to real impact](https://blog.easi.net/en/ai-in-belgian-smes-from-experimentation-to-real-impact?hsLang=en) AI is evolving at an unprecedented pace, and the pressure on organisations to keep up is... [Read more](https://blog.easi.net/en/ai-in-belgian-smes-from-experimentation-to-real-impact?hsLang=en) ![The Most Common Cyber Incidents Today](https://blog.easi.net/hubfs/The%20Most%20Common%20Cyber%20Indicents%20Todays%20-%20EN.png) ### [The Most Common Cyber Incidents Today](https://blog.easi.net/en/the-most-common-cyber-incidents?hsLang=en) Cyber-attacks are no longer exceptional crisis situations. Today, they are part of the daily... [Read more](https://blog.easi.net/en/the-most-common-cyber-incidents?hsLang=en) - [Solutions](https://www.easi.net) - [AAA Financials](https://www.easi.net/en/solutions/aaa-financials) - [Adfinity](https://adfinity.easi.net) - [Cloud2be](https://www.easi.net/en/solutions/managed-cloud) - [Rooftop](https://www.easi.net/en/solutions/rooftop) - [Security](https://www.easi.net/en/solutions/security) - [SmartSales](https://www.easi.net/en/solutions/smartsales) - [SmartDrive](https://smartdrive.easi.net) - [SmartShare](https://smartshare.easi.net) - [Synchro Production](https://www.easi.net/en/solutions/synchro-production) - [Services](https://www.easi.net/en/services) - [Mobile Development](https://www.easi.net/en/services/mobile-development) - [Software development](https://www.easi.net/en/services/application-development) - [Managed Services](https://www.easi.net/en/services/managed-services) - [On Premise infrastructure](https://www.easi.net/en/services/it-infrastructure-projects) - [Cosourcing](https://www.easi.net/en/services/co-sourcing) - [End user support](https://www.easi.net/en/services/end-user-support) - [Company](https://www.easi.net) - [About EASI](https://www.easi.net/en/about-easi) - [Jobs](https://www.easi.net/en/jobs) - [Blog](https://blog.easi.net) - [Press](https://www.easi.net/en/press) - [Customer stories](https://www.easi.net/en/customer-stories-references) - [Trainings](https://www.easi.net/en/trainings) - [Events](https://www.easi.net/en/events) - [Customer support](https://www.easi.net/en/customer-support) - [Legal](https://www.easi.net/en/about/legal/website-privacy-policy) - Useful links - [Microsoft](https://www.easi.net/en/services/microsoft) - [IBM Power Systems](https://www.easi.net/en/services/ibm-power-systems) - [IBM Notes](https://www.easi.net/en/services/ibm-notes) - [EASI Jump](https://www.easi.net/en/easi-jump) - [English](https://blog.easi.net/en/what-the-attack-on-jlr-teaches-us-about-ot-resilience) - [Français - Belgique](https://blog.easi.net/fr/ce-que-lattaque-contre-jaguar-land-rover-nous-enseigne-sur-la-résilience-ot) - [Nederlands - België](https://blog.easi.net/nl/wat-de-aanval-op-jaguar-land-rover-ons-leert-over-ot-weerbaarheid) - [Privacy](https://www.easi.net/about/legal/website-privacy-policy) - [info@easi.net](mailto:info@easi.net) - [+32 67 28 10 00](tel:+3216313000) - [Contact](https://www.easi.net/en/contact) - - - - - -