Group 1 Automotive says CDK cybersecurity incident disrupts business processes

Group 1 Automotive announced that the cybersecurity incident recently experienced by third-party software provider, CDK Global, has disrupted Group 1’s business applications and processes in its U.S. operations that rely on CDK’s dealers’ systems. In response, the Company immediately activated its cyber incident response procedures and proactively took measures to protect and isolate its systems from CDK’s platform. Despite the CDK service outage, all Group 1 U.S. dealerships continue to conduct business using alternative processes until CDK’s dealers’ systems are available. The Company’s dealerships in the U.K. do not use CDK’s dealers’ systems and are therefore not impacted by the CDK service outage. CDK has advised that it anticipates the restoration of the dealer management system will require several days and not weeks. The timing of the restoration of other impacted CDK applications remains unclear at this time. Group 1’s ability to determine the material impact, if any, of the CDK incident and the resulting service outage, will ultimately depend on a number of factors, including when, and to what extent, the Company resumes its access to CDK’s dealers’ systems. Group 1 is closely monitoring this situation and will take additional action if determined necessary.