Jaguar’s 2025 cyber breach showed what happens when identity fails: production stops, data is stolen, trust collapses. This case study unpacks the attack chain, the AD ↔ Entra ID recursion risk, and why CPS 230 & Essential Eight demand proof of recovery across both planes - ExaGrid for workloads, Keepit for SaaS and identity.