Cyber-attacks: A wake-up call for supply chain resilience

The recent cyber-attack on Jaguar Land Rover (JLR) has sent reverberations far beyond the walls of its manufacturing sites. While JLR’s IT systems were shut down to contain the

attack, the ripple effects reached thousands of suppliers, small businesses, and contractors

across its supply chain. This event is a stark reminder that in today’s hyper-connected

world, a single cyber incident in a major business can impact an entire supply chain.

The Impact on Suppliers

For many suppliers — especially small and medium-sized enterprises (SMEs) — the

consequences of a cyber-attack on any business can be immediate and severe:

• Production delays: Just-in-time manufacturing means that even a brief pause in

production can leave suppliers with idle lines, wasted labour, and disrupted

schedules.

• Cashflow shocks: Businesses relying on timely invoices and payments can find

themselves suddenly without revenue. With a sudden drop in revenue, insolvency

can become a real prospect.

• Operational uncertainty: Suppliers may have to scramble to reallocate resources,

store unfinished products, or negotiate emergency logistics.

• Reputational risk: Even if an attack is outside their control, some suppliers can face

reputational damage for failing to fulfil or achieve agreed service levels.

Some commentators have estimated the economic impact of the JLR cyber-attack to be

around £1.9 billion to the UK economy, which highlights how interconnected modern

manufacturing ecosystems truly are. Cyber risk has evolved into a business continuity risk,

making it an essential boardroom priority.

Lessons for supply chain businesses

The continuing rise in cyber-attacks means that suppliers, no matter their size, should heed

the lessons being learnt:

1. Map your dependencies

Understand which customers, systems, and suppliers you rely on most. Identify single

points of failure and assess how an outage at a key partner could affect your operations.

Diversifying suppliers or creating backup arrangements can reduce systemic risk.

2. Strengthen cyber hygiene

Cybersecurity is no longer just an IT issue. Key steps include:

• Network segmentation between corporate and operational systems

• Multi-factor authentication (MFA) for all critical access

• Robust offline backups which are tested regularly

3. Build financial resilience

Unexpected stoppages can create cashflow challenges. Suppliers should:

• Produce liquidity forecasts for at least 30–90 days

• Ensure funding solutions have flexibility built in and there are open lines of

communication with critical funders

• Review insurance coverage for contingent business interruption

4. Prepare a business continuity plan (BCP)

Having a plan for operational disruptions is critical. Steps include:

• Developing manual workflows for order processing and invoicing

• Identifying alternative suppliers or logistics options

• Assigning a clear incident-response leader

  
  

5. Collaborate and share threat intelligence

Cyber threats are evolving constantly. Joining industry-based security groups allows

suppliers to share threat indicators and best practices. Proactive communication with

customers about potential risks can also help maintain trust during incidents.

Looking Ahead

The JLR cyber-attack is more than a headline; it’s a wake-up call for every business

connected to complex supply chains. Businesses at every tier must treat cyber resilience as

operational resilience. The ability to withstand disruptions isn’t just about technology — it’s

about preparation, planning, and collaboration across the entire network of partners.

For suppliers, the message is clear: Cyber resilience is now supply-chain resilience. No

business is too small to be affected by its partners’ cyber incident – preparation is the only

safeguard. Plan now, strengthen systems, and build financial and operational buffers. Acting on these lessons transforms existential risks into manageable operational risks — and ensures you’re ready for the next challenge before it hits.