SONIC AUTOMOTIVE INC

Jul 2024 · Graded Verified · Retail and Consumer · Government record

Incident summary

SONIC AUTOMOTIVE INCJul 2024
First disclosed Jun 2024 · Item 8.01
Not yet quantified
VVerified
Sonic Automotive could not sell cars for the better part of two weeks, not because its own network fell but because CDK Global, the single vendor running its dealer management system, was ransomwared by a crew reporting ties to BlackSuit. When one SaaS provider is the floor beneath every franchise's sales, inventory, and accounting, its outage is the dealership's outage. Sonic booked a material hit to the quarter over software it did not run and could not bring back.
Retail and Consumer
SEC 8-K, Item 1.05
Initial attack type third-party or supply chain confirmed · Impact operational outage confirmed + ransomware · Actor BlackSuit
Filing history
Jun 2024Item 8.01 ↗first disclosed
Jul 2024Item 1.05 ↗headline

About this record

This incident is on the public government record: an SEC 8-K filing or a state-regulator notification, graded Verified. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.

Cite this incident

← The complete On the Government Record ledger ← Back to the index