LKQ CORPORATION

LKQ Corporation notified the New Hampshire Attorney General of a security event involving its Oracle E-Business Suite. A third party exploited a previously unknown vulnerability (zero-day) in early August 2025. LKQ detected the activity in early October 2025, engaged forensic investigators, and took the system offline. The breach impacted 27 New Hampshire resident sole-proprietor suppliers, exposing their EINs and SSNs. LKQ began notifying affected individuals on December 15, 2025, offering two years of credit monitoring via TransUnion.