LKQ CORPORATION
bd_ca963b548e29a561 · schema v1 · pii pii-v1
Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group Cl0p on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Source: Ransomware.live
Post text · scraped from the leak site
LKQ Corporation is a leading provider of alternative and specialty parts to repair and accessorize automobiles and other vehicles. The company offers a broad range of replacement parts, components, and systems needed to repair cars and trucks, with an emphasis on recycled and remanufactured parts. LKQ Corporation operates across North America, Europe, and Taiwan.
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
Oct 27, 2025
Claim posted
—
Corroborated · see linked filings
Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- Illinois State AGbd_290f5cb85d1397ca2025-12-01 · +35dCandidate
- Indiana State AGbd_0d24498ef978ea452025-12-15 · +49dVerified
- Maine State AGbd_222597b2166e9a952025-12-15 · +49dVerified
- Montana State AGbd_3b11067f5766d01d2025-12-15 · +49dVerified
Show 6 more filings ↓Show fewer ↑up to 50d gap
- New Hampshire State AGbd_6c3aa51f5e66e7ed2025-12-15 · +49dVerified
- Nebraska State AGbd_a883eb69b4b810b72025-12-15 · +49dVerified
- Vermont State AGbd_e09da3b67b0dfe832025-12-15 · +49dVerified
- California State AGbd_f78e0c2f9e23cbd92025-12-15 · +49dVerified
- Massachusetts State AGbd_6b3dcc0a0ce73b642025-12-16 · +50dVerified
- Texas State AGbd_9f980168ee3c217d2025-12-16 · +50dVerified
Filing propagation · 11 filings · 10 states
View merged incident ↗Pattern: first filing Oct 27, last Dec 16 (TX) — a 50-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.