Jaguar Land Rover Cyberattack

Lord Fox Excerpts

Wednesday 10th September 2025 Lords Chamber

[Lord in Waiting/Government Whip (Lord Leong) (Lab)]

My Lords, before I respond to the noble Lord’s question, I take this opportunity to thank my noble friend Lady Jones of Whitchurch for her sterling worth as a Minister in this House. I am sure that all noble Lords will thank her for her performance at this Dispatch Box and her support to all Members across the House. I am sure that we will hear many more of her contributions from the Back Benches.

The new Commercial Digital Centre of Excellence for the UK central Government will substantially improve service delivery, enhance user satisfaction and drive efficiency, leveraging new procurement regulations. The provision of cybersecurity services is a part of this vision. In addition, through the Crown Commercial Service’s Cyber Security Services 3 agreement, we provide an official streamlined route to market for National Cyber Security Centre-assured services. I also need to say that the Government are working tirelessly to improve the cyber resilience of government systems, basing our efforts around the Government’s cybersecurity strategy. We have made important steps in understanding and mitigating cyber risks. We are now implementing a more interventionist approach to public sector cyber resilience to address key risks and better support departments.

[Lord Fox (LD)]

My Lords, some 40% of companies in the UK reported last year that they had faced some sort of cyberattack. High-profile attacks such as those on JLR, Marks & Spencer and the British Museum are just the tip of the iceberg. In the Commons, the Minister referred to legislation. Can the noble Lord confirm when the cyber Bill will appear? What methodology might the cyber Bill use to solve this? The Minister implied that this legislation would seek to cause businesses to try harder. The protagonists of this crime are not state-sponsored, but they are tolerated and supported by the regimes in which they exist and they are part of the asymmetric war that this country faces. Of course business has to defend itself, and the Minister has outlined what the Government are doing now, but it is quite clear that that is not enough. What will the Government do that is different from what they are doing now to defend ourselves from this ever- growing problem?

[Lord Leong (Lab)]

My Lords, the noble Lord made a couple of interesting points, which are crucial, and I will try to address them. Cybersecurity of the UK is a key priority for this Government. It is crucial to protect public services, the public, our way of life and a successful, growing economy. We have been taking significant action to help protect business from cyber- attacks.

We are also providing businesses with the tools, advice and support to protect themselves from cyberthreats, including the Cyber Governance Code of Practice, which shows boards and directors how to effectively manage the digital risk to their organisation. The highly effective cyber essentials scheme prevents common attacks and reduces the likelihood of a cyber insurance claim by 92%. Before I was invited to be a part of the Government, when I ran my businesses I ensured that they all had a cyber essentials certificate. That is the basic requirement that you need to have. At the same time, businesses need to protect themselves by having sufficient cybersecurity insurance. There are a wide range of tools and support from the National Cyber Security Centre including training for boards and staff and an early warning system to get notified about cyberthreats to networks.

When parliamentary time allows, this Government will introduce the cybersecurity and resilience Bill to raise cybersecurity standards in critical and essential services such as energy, water and the NHS.