FEDERALItem 8.01 · voluntaryHackingRetail & ConsumerRetailLowContained

LKQ CORPORATION

bd_69e1c9d86e0c2774 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 13, 2024

Filed

Dec 13, 2024

To disclose

4 weeks

Affected

Not disclosed

Confidence

68%

Full breach record for LKQ CORPORATION →3 incidents on file

LKQ Corporation (CIK 0001065696) filed an 8-K on December 13, 2024, reporting a cybersecurity incident affecting a single business unit in Canada. The Company detected unauthorized access to IT systems on November 13, 2024, which disrupted operations. LKQ engaged forensic investigators, notified law enforcement, and contained the threat. The Company states the incident is not material to its financial condition, though operations were impacted for a few weeks. No specific data types or individual counts were disclosed.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 4 weeks / 30 days

Nov 13, 2024

Discovered

Dec 13, 2024

Filed

vs. sector median

3 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: LKQ CORPORATION
norm: lkq
SEC CIK: 0001065696
Domain: lkqcorp.com

Name: LKQ CORPORATION
norm: lkq
SEC CIK: 0001065696
Domain: lkqcorp.com
Industry: Retail & Consumerllm

Discovered: Nov 13, 2024
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: —
Attack vector: Unknown
Threat actor: External
Regulator citations: notified law enforcement authorities

During the incident: Activating our security incident response and recovery plans
Partnering with industry leading forensic investigators
Initiating containment measures for affected systems
Promptly notified law enforcement authorities
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(30 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filing

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statementThis record

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.sec.gov/Archives/edgar/data/1065696/000106569624000134/lkq-20241213.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
Filed at: Dec 13, 2024
Raw hash: 66f397bb022ae5b5c2a3ac6e29576de667f856765a0a1bd44f700be49f116cab

AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.

text/html28.5 KB

Download View at source

Reporting entityLKQ CORPORATION

Victim entityLKQ CORPORATION

Incidentdiscovered Nov 13, 2024

Stated responseActivating our security incident response and recovery plans

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.sec.gov

Source filing