FEDERALItem 8.01 · voluntaryHackingSupply Chain (3P Vendor)Customer Data InvolvedLowActive
LITHIA MOTORS INC
bd_e38879e27c8f570a · schema v1 · pii pii-v1
Full breach record for LITHIA MOTORS INC →Lithia Motors, Inc. filed an 8-K on June 24, 2024, reporting a cybersecurity incident involving third-party provider CDK Global. On June 19, 2024, CDK notified Lithia that its systems were suspended due to a cyber incident. Lithia severed connections to CDK, causing operational disruptions to its dealer management, CRM, and inventory systems. The Company stated it has not identified any unauthorized access to its own systems.
SEC clockMateriality determined Jun 24, 2024 → Filed Jun 24, 20240d ✓ SEC 4-day OK5 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.sec.gov/Archives/edgar/data/1023128/000102312824000079/lad-20240619.htm
DisclosureLens renders the full SEC/HHS filing inline below from the originating regulator’s public record (§4.5 fair report privilege).
- Filed at
- Jun 24, 2024
- Raw hash
- 429906f9cbbc43e2b969d1d3df07d2b98a3699fc2de61e94beae8a4f8c6c5ee4
Source filing
AI-assisted summary above. The structured extract on this page was generated from the document below. Inspect the source to verify or correct any field.
Reporting entity
- Name
- LITHIA MOTORS INCnorm: lithia motors
- SEC CIK
- 0001023128
Victim entity
- Name
- LITHIA MOTORS INCnorm: lithia motors
- SEC CIK
- 0001023128
Incident
- Discovered
- Jun 19, 2024
- Materiality determined
- Jun 24, 2024
- Notification sent
- Jun 24, 2024
- Affected individuals
- Not disclosed
- Data types
- —
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Third party
- via CDK Global
- Initial access
- supply_chain
Compliance
- Time to disclose
- 5 days(5 days from discovery to filing)
- Compliance flags
- SEC 4-day OK · 0d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status SEC Materiality determined: Jun 24, 2024→ Filed: Jun 24, 20240d cal. 4 business days SEC 4-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.