AutoNation, Inc.

AutoNation, Inc., via processor CrossCheck, Inc., reported unauthorized access to its merchant portal between May 18-20, 2024. The incident affected 7 Nebraska residents, exposing names and financial account information. CrossCheck notified federal law enforcement, provided 12 months of credit monitoring via Experian, and sent notices to state regulators and credit bureaus. Notification to residents occurred on March 4, 2025.

CrossCheck, Inc. reported a data breach affecting AutoNation, Inc. customers. Unauthorized access occurred May 18-20, 2024, via the merchant portal. Data exposed included names, driver's license numbers, and financial account info. 4,054 individuals affected; 7 in Maine. Notification sent March 4, 2025. Credit monitoring offered.

CrossCheck, Inc. reported a cybersecurity incident affecting AutoNation, Inc. customers. Between May 18-20, 2024, an unauthorized actor accessed CrossCheck's merchant portal, potentially exposing names, driver's license numbers, and financial account information of 299 Maryland residents. CrossCheck notified federal law enforcement, provided 12 months of credit monitoring via Experian, and implemented additional employee safeguards. Notification to the Maryland Attorney General was filed on March 4, 2025.

CrossCheck, Inc. reported unauthorized access to its merchant portal between May 18-20, 2024, affecting customer data for AutoNation, Inc. The breach exposed names and limited personal information. CrossCheck notified federal law enforcement, enhanced network security policies, and offered credit monitoring to affected individuals. Notices were sent in March 2025.

On June 19, 2024, AutoNation was notified by third-party provider CDK Global of a cyber incident affecting CDK's systems, including the dealer management system (DMS) supporting AutoNation dealership sales, service, inventory, CRM, and accounting functions. AutoNation took containment steps and activated business continuity plans. DMS access has been restored; some ancillary integrations remain limited. Q2 2024 EPS impact estimated at ~$1.50/share. No indication of compromised personal data disclosed.

On June 19, 2024, AutoNation, Inc. was notified by third-party provider CDK Global of a cyber incident affecting CDK's systems, including those supporting AutoNation's dealer management system (DMS) used for sales, service, inventory, CRM and accounting. AutoNation implemented containment and business continuity measures; dealerships remained open and operated via manual/alternative processes. Scope, nature, and full impact were not yet known at filing under Item 8.01.

AutoNation, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-06-02. 38 Massachusetts residents were affected. The report records the breach type as electronic.

AutoNation Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2014-05-27. 38 Massachusetts residents were affected. The report records the breach type as electronic.

AutoNation, Inc. notified the NH Attorney General of a security incident involving third-party vendor TradeMotion. Criminal hackers accessed credit card info (names, addresses, emails, card numbers) between March 5 and May 2, 2014. 8 NH residents affected. Notifications mailed May 20, 2014. Experian provided 1-year identity theft protection.