FEDERALItem 8.01 · voluntaryHackingSupply Chain (3P Vendor)Customer Data InvolvedLowActive
CDK GLOBAL II LLC
bd_39919e55878e33c0 · schema v1 · pii pii-v1
Full breach record for CDK GLOBAL II LLC →Penske Automotive Group filed an 8-K on June 19, 2024, disclosing that its third-party vendor, CDK Global, LLC, experienced a cybersecurity incident rendering its systems inoperable. Penske's primary US automotive operations do not use CDK, but its Premier Truck Group business was disrupted. Penske implemented business continuity plans and manual processes to maintain operations. The investigation is ongoing.
SEC clockMateriality determined Jun 19, 2024 → Filed Jun 21, 20242d ✓ SEC 4-day OK2 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1019849/000101984924000089/pag-20240619.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jun 21, 2024
- Raw hash
- ea8db58b173bc6c7dc5a41f8fd8851bd0b29ee23065b803357f66e6e3294a026
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- Penske Automotive Group, Inc.norm: penske automotive
- SEC CIK
- 0001019849
Victim entity
- Name
- CDK GLOBAL II LLCnorm: cdk global ii
Incident
- Discovered
- Jun 19, 2024
- Materiality determined
- Jun 19, 2024
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via CDK Global, LLC
Compliance
- Time to disclose
- 2 days(2 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 2d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Jun 19, 2024→ Filed: Jun 21, 20242d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.