There were indications that Jaguar used the same outsourced IT org as another large company who has struggled to recover from a wide ranging hacking incident.
https://doublepulsar.com/the-elephant-in-the-biz-outsourcing...
I've had contact with several companies where once outsourced IT competency and security continuity is just out the window ...
Sometimes not even the outsourcing company's "fault" as humans / organizations love to think "oh I don't have to think about that now that I outsourced it" and folks who do worry about the detail then leave (they can't use their skills) and now you got folks in charge who don't even understand what they're agreeing to with their outsourcing company. Other times, it is the outsourcing groups fault ...