Jaguar Land Rover said it has restored a portion of its digital operations as part of a controlled restart, weeks after a major cyberattack. 

The automaker has been forced to pause production since it disclosed the incident on Sept. 2, resulting in a massive supply chain disruption and forcing thousands of workers to remain home. 

“The foundational work of our recovery program is underway,” the company said in a Thursday update on its website. 

The company’s Global Parts Logistics Centre, which provides parts to retailers in the U.K. and elsewhere, is being restored to normal operations, according to the update. 

JLR is working to clear a huge backlog of payments to its suppliers and has increased the IT capacity for processing invoices. 

The company has also restored the financial system used to process wholesale vehicle sales, allowing for faster sales and registration. 

The automaker, a subsidiary of Tata, said it is working around the clock with law enforcement, forensic experts and officials at the National Cyber Security Centre to help relaunch operations in a safe and secure manner. 

The company this week warned the restart of production would be delayed until Oct. 1. 

Earlier this month, JLR confirmed it was investigating a claim that a threat group stole a cache of data during the attack. The hackers behind the claim are linked to the notorious cybercrime group Scattered Spider. 

After initially denying knowledge of a data breach, the company later confirmed that customer data had been stolen in the attack.