In the summer of 2025, one of Britain’s most recognisable manufacturers ground to a halt. Jaguar Land Rover, a company with global scale, deep pockets and serious technical resources, was brought down by a cyberattack that stopped production for around five weeks.
The estimated cost? Roughly £1.9 billion. This is widely reported as the most economically damaging cyber incident in UK history.
It’s tempting to read a story like that and feel oddly reassured. That’s a problem for the giants. We’re too small to be a target. But that’s exactly the wrong lesson to take from it. The real takeaway isn’t about Jaguar Land Rover’s size, it’s about downtime. And downtime doesn’t care how big you are.
Ask yourself a simple question: if your systems went dark tomorrow morning, how would your business actually function?
- No access to client files.
- No email.
- No accounting software
- No case management system
- No booking platform.
For a law firm, that’s deadlines missed and clients left in the dark. For an accountancy practice mid-tax-season, it’s chaos. For most small businesses, even a few days offline means lost revenue you never get back, plus a scramble to reassure worried clients.
Jaguar Land Rover could absorb a five-week shutdown, painful as it was. Most smaller firms can’t survive five days. Research consistently shows that a large share of small businesses hit by serious data loss never fully recover. The damage isn’t just the attack itself, it’s the slow bleed of downtime, recovery costs, and clients quietly drifting to competitors who were up and running.
This is why business continuity matters more than any single security product. Antivirus and firewalls are about keeping attackers out. Continuity planning is about what happens when something gets through anyway, because eventually, something tries.
The questions worth answering now, while it’s calm, are these:
- Where are your backups?
- When were they last tested?
- Could you actually restore from them, or do you just assume you could?
- How long would a full recovery take, and is that fast enough to keep trading?
A backup you’ve never tested isn’t a backup, it’s a hope. We’ve seen businesses discover, at the worst possible moment, that their backups were incomplete, corrupted, or sitting on the same network the ransomware just encrypted. A proper continuity plan means offline or immutable backups, a tested restore process, and a clear, written sequence for who does what in the first chaotic hours.
The Jaguar Land Rover story made headlines because of its scale. But the same playbook that took down a manufacturing giant, gaining access, causing disruption, demanding payment, is used against small firms every single day. The difference is that when it happens to a small business, it doesn’t make the news. It just quietly ends.
You don’t need a corporate IT department to be resilient. You need the right preparation: solid backups, a recovery plan you’ve actually rehearsed, and a partner who knows what to do when the pressure’s on. That’s the difference between a bad week and a closed business.
At IT Backbone, we help businesses like yours build genuine resilience not just security software, but tested backups and recovery plans that work when you need them most. If you’re not 100% confident you could bounce back from a serious outage, that uncertainty is worth resolving.
Book a free, no-obligation consultation with Jason Chaplin and let’s pressure-test your recovery plan together. Book a free consultation or call 0207 199 2222.
