AUTONATION, INC.
Jul 2024 · Graded Verified · Retail and Consumer · Government record
Incident summary
AUTONATION, INC.Jul 2024
$43M
Spent responding & recovering
Direct expense
AutoNation lost no data of its own; it lost CDK Global, the dealer-management system 15,000 dealerships treat as the floor they stand on, taken down through a single phishing email by ransomware that reporting ties to BlackSuit. An always-on VPN had already seated the vendor inside every dealer's network, so one compromise closed an industry from a data center no dealer owned. The $1.50-a-share hit is what vendor concentration charges when the front door belongs to someone else.
Verified: the linked document states this figure.
SEC 8-K, Item 8.01
Initial attack type third-party or supply chain confirmed · Impact operational outage confirmed + ransomware · Actor BlackSuit
Quantified 17 days after disclosure.
What the company has said it cost
The company’s own disclosed figure, as it changed over time. The loss on the record is this same figure, typed and categorized.
About this record
This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.