AutoNation, Inc.
ent_019de21bf42899bb7bfe8626c77d7bd2
Disclosures
5
SEC 10-K Item 1C · State AG · SEC 8-K · 3 jurisdictions
Multi-filing incidents
—
no multi-filing incident in sample
Max affected reported
858
nationwide · State AG IN
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- AutoNation, Inc.
- Normalized
- autonation— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- 0000350698
- Domain
- autonation.com
Disclosure history (5)newest first
- FEDERALSEC 10-K Item 1Cas victim2026-02-12
AutoNation, Inc. (SEC CIK 0001478243) filed its 2024 10-K with Item 1C disclosing its cybersecurity risk management and governance program. The filing states that risks from cybersecurity threats have not materially affected the company and it does not expect them to do so. No specific incidents, breaches, or material impacts were reported.
- 🦀Maryland State AGas victim2025-03-04
CrossCheck, Inc. reported a cybersecurity incident affecting AutoNation, Inc. customers. Between May 18-20, 2024, an unauthorized actor accessed CrossCheck's merchant portal, potentially exposing names, driver's license numbers, and financial account information of 299 Maryland residents. CrossCheck notified federal law enforcement, provided 12 months of credit monitoring via Experian, and implemented additional employee safeguards. Notification to the Maryland Attorney General was filed on March 4, 2025.
- 🏎️Indiana State AGas victim2024-08-19
Autokiniton US Holdings Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2024-01-16 and was reported on 2024-08-19. 2 Indiana residents were affected. 858 individuals affected in total.
- FEDERALSEC 8-Kas victim2024-07-15
On June 19, 2024, AutoNation was notified by third-party provider CDK Global of a cyber incident affecting CDK's systems, including the dealer management system (DMS) supporting AutoNation dealership sales, service, inventory, CRM, and accounting functions. AutoNation took containment steps and activated business continuity plans. DMS access has been restored; some ancillary integrations remain limited. Q2 2024 EPS impact estimated at ~$1.50/share. No indication of compromised personal data disclosed.
- FEDERALSEC 8-Kas victim2024-06-24
On June 19, 2024, AutoNation, Inc. was notified by third-party provider CDK Global of a cyber incident affecting CDK's systems, including those supporting AutoNation's dealer management system (DMS) used for sales, service, inventory, CRM and accounting. AutoNation implemented containment and business continuity measures; dealerships remained open and operated via manual/alternative processes. Scope, nature, and full impact were not yet known at filing under Item 8.01.