SONIC AUTOMOTIVE, INC.

Sonic Automotive, Inc. filed an 8-K/A (Amendment No. 1) on August 5, 2024, providing supplemental information about a cybersecurity incident affecting CDK Global on June 19, 2024. The incident disrupted Sonic Automotive's access to its DMS and CRM systems. Systems were restored, but operational disruptions continued through July. The incident materially impacted Q2 2024 results, adversely affecting GAAP EPS by approximately $0.64.

Sonic Automotive disclosed under Item 1.05 that disruptions to its CDK Global-provided dealer management system, CRM and other sales/inventory/accounting systems began June 19, 2024 from a cybersecurity incident at CDK. Basic DMS functionality has been restored; CRM and other systems remain offline. The Company concluded the incident is reasonably likely to have a material impact on Q2 2024 results due to slower vehicle sales. Full scope and restoration timing remain unclear.

Sonic Automotive, Inc. filed an 8-K on June 21, 2024, reporting a cybersecurity incident involving third-party provider CDK Global. On June 19, 2024, CDK notified customers of a cybersecurity incident that resulted in the suspension of systems used by Sonic, including its dealer management system (DMS) and customer relationship management (CRM) system. Sonic took precautionary containment steps and commenced an investigation. The full scope and impact, including whether customer data was accessed, are not yet known. The incident is ongoing.