When Jaguar Land Rover (JLR) was hit by a major cyber-attack in September 2025, one of the first things the company’s cybersecurity leader did was to call over 30,000 staff on site to reset their passwords.
Speaking during Infosecurity Europe on June 3, Ashish Shrestha CEO of Zyn Global, and group CISO of JLR at the time of the cyber incident, said that the decision was made because it was vital to ensure that the identities of the staff could be trusted post-breach and while the company responded to the incident.
"One of the first and foremost things was we did an enterprise-wide password reset for 30,000 people. And we asked every individual to come on site to do it,” Shrestha said.
(Hello, I have been very bad at using this website lately, sorry - work laptop is rather locked down so I tend not to have easy access during the day!)
infosecurity-magazine.com/news…
Speaking at Infosecurity Europe, Ashish Shrestha, former CISO at Jaguar Land Rover revealed why he wanted over 30,000 employees to change their passwords in the immediate aftermath of the incident
Danny Palmer (Infosecurity Magazine)
GrumpyDad 🇺🇦🇵🇸
in reply to nixCraft 🐧 • • •"We won't use this data to train new Claude models".
Riiiiiiiiiight.....
Tor Iver Wilhelmsen
in reply to nixCraft 🐧 • • •Peter
in reply to nixCraft 🐧 • • •Paul Brzeski
in reply to nixCraft 🐧 • • •Fable 5? But Fable 4 isn't due till 2027...
Pufty
in reply to nixCraft 🐧 • • •Urzl
in reply to nixCraft 🐧 • • •System Adminihater
in reply to nixCraft 🐧 • • •bent lion
in reply to nixCraft 🐧 • • •I completely agree, data privacy is completely out of hand. Though AI is also getting there pretty quickly too, which makes me torn on this one. Imagining myself as an analyst working at Anthropic with the goal of keeping a leash on it's progress, I can totally see how retaining data for 30 days would be an immense help for troubleshooting.
I guess it's all down to trust. Too bad that's in short supply.