Business Context and Reporting Period
Company: Group 1 Automotive, Inc.
Filing Type: Form 8-K (Current Report)
Date of Report: June 19, 2024 (Event Date)
Reporting Period: Specific event disclosure regarding a cybersecurity incident affecting third-party vendor CDK Global LLC.
Key Financial Metrics
This filing is an event-based report and does not contain financial statements, revenue figures, profit margins, cash flow data, debt levels, or liquidity metrics. The filing text does not provide a clear value for any financial performance indicators.
Material Changes and Operational Impact
- Cybersecurity Incident: The Company was informed of a cybersecurity incident at CDK Global LLC, a provider of SaaS platforms for dealership operations (sales, financing, inventory, back-office).
- Operational Disruption: The incident caused service outages on CDK's systems, disrupting Group 1's business applications and processes in its U.S. operations.
- Geographic Scope: U.S. dealerships are impacted; U.K. dealerships are not impacted as they do not use CDK's systems.
- Business Continuity: All U.S. dealerships continue to conduct business using alternative processes.
- Response Actions: Group 1 activated cyber incident response procedures and isolated its systems from CDK's platform.
Outlook, Risks, and Management Commentary
- Restoration Timeline: CDK anticipates the restoration of the dealer management system will require several days, not weeks. The timing for other impacted applications remains unclear.
- Materiality Assessment: The Company states its ability to determine the material financial impact depends on the duration of the outage and the extent of resumed access to CDK systems.
- Risk Factors: Reliance on third-party software providers for critical operations and potential revenue loss or increased costs due to service interruptions.
Key Facts for Investor Verification
- Verify the duration of the CDK service outage and the actual timeline for full system restoration.
- Monitor subsequent filings for quantification of financial impact (revenue loss, remediation costs) once the event concludes.
- Confirm the effectiveness of alternative processes in maintaining sales and operational throughput during the outage.
- Review the attached press release (Exhibit 99.1) for additional details on the scope of the incident.