Jaguar Land Rover Cyber-attack

Scott Arthur Excerpts

Tuesday 9th September 2025 Commons Chamber

[Chris Bryant]

The right hon. Gentleman makes a very good point about personal data. When I was the data Minister, that was one of the things I was trying to push very strongly—there is no point in trying to get people to give data if it is not then secure. That is the single most important part of what we have to do, not least because if people do not trust that their data is going to be secure, it is perfectly understandable that they are not going to surrender it. That does not just apply to Government, although it is very important in Government; it applies across all sorts of different companies.

I slightly take issue with the right hon. Gentleman’s delineation of those three groups; I think there is just one, which is a bunch of criminals. Their intent sometimes mixes a desire for cash with a desire for some kind of spurious infamy, but I just think of all of them as criminals. As for my inimitable style, I can neither confirm nor deny it.

[Dr Scott Arthur (Edinburgh South West) (Lab)]

I agree with those Members who have raised concerns about the impact that this cyber-attack might have on jobs. It also has an impact on our reputation as a country when two iconic brands basically have to go offline. I do not expect that this will be the last attack on either a retailer or an automotive company, but the risks to automotive companies are particularly acute, because going forward, cars are basically going to be computers on wheels. Customers will be concerned about what attacks mean for their security, but also about what the impact on the automated features within the car means for driver safety. The Minister said that the UK is increasingly a target; is that because of the interest in the UK, or because we are more susceptible?

[Chris Bryant]

No, I meant that every country in the world is increasingly susceptible, not just the UK. This is a growing business, and the worst thing we could do would be to feed that business model. I would urge caution about one thing. It may well be that we do not know all the incidents that have taken place, because understandably, lots of companies will not want to make them known publicly if they feel that they have managed to deal with the issue fairly swiftly. That is why, as I said, we consulted on the issue of ransomware earlier this summer, and I was gratified by the response we had from more than 70% of businesses.