Asbury Automotive says CDK cyber incident has adversely impacted operations

Asbury Automotive Group learned on Wednesday, June 19, 2024, that one of its vendors, CDK Global, experienced a cyber-attack impacting certain services provided to the Company and many other automotive retailers, including the Company’s sales, service, inventory, customer relationship management, and accounting functions. “Upon discovery of the incident, we took immediate precautionary steps to protect our systems,” Asbury said. “While information surrounding this event continues to evolve, our stores have contingency plans in place to minimize disruptions to our daily operations. Accordingly, at this time, our ability to sell and service vehicles remains operational, although some elements of our business may function slower than normal. Our Koons Automotive locations in Maryland and Virginia do not utilize CDK’s Dealer Management System or CDK’s Customer Relationship Management system and therefore continue to operate with minimal interruption, as does Clicklane, our online vehicle purchasing platform. This incident has adversely impacted the Company’s business operations, a circumstance likely to continue until such time as the relevant systems are fully restored. Due to the ongoing nature of the situation, we are presently unable to confirm the full scope, nature and impact of the incident, or whether any customer data was accessed. As a result, the Company has not yet determined whether the incident is reasonably likely to have a material impact on the Company’s financial condition or results of operations. We remain in contact with CDK Global to assess the situation. Additional updates may be provided as more information becomes available.”