Russian hackers carried out the JLR cyberattack that shut production for six weeks and triggered a $2B UK bailout, the New York Times reports.