Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Cybercrime

AutoCanada Hit by Cyberattack

AutoCanada has disclosed a disruptive cybersecurity incident after also being impacted by the recent CDK Global ransomware attack.

Car hacking

AutoCanada, a major Canadian car dealership, this week disclosed a cyberattack that may result in some disruptions.

The incident was discovered on August 11 and it impacted some internal IT systems, the company said.

“Immediately upon detecting the incident, AutoCanada took action to safeguard its network and data. This included engaging with leading cybersecurity experts to assist us with containment and remediation efforts, as well as to conduct a thorough investigation to understand the scope and impact of the incident,” AutoCanada said.

“As the investigation is ongoing, the full scope, nature and impact of the incident, including the extent to which any customer, supplier or employee data has been accessed is not yet known.  Although our business operations remain open at this time, the incident may result in disruptions until the relevant systems are fully restored,” it added.

While it has not shared any additional information on the cyber incident, the company’s brief description suggests that it may have been targeted in a ransomware attack.

AutoCanada operates 70 dealerships in Canada and 18 in Illinois, in the United States, selling tens of thousands of new and used vehicles every year.

Advertisement. Scroll to continue reading.

On the same day it announced the cybersecurity incident, AutoCanada revealed that its financial results for the second quarter of 2024 were negatively impacted by the recent ransomware attack suffered by CDK Global.

Many car dealerships in North America were forced to use pen and paper in June after cybercriminals breached the systems of CDK Global, which provides software for thousands of auto dealers in the US and Canada.

Another car dealership, Florida-based AutoNation, also reported lower quarterly earnings due to the CDK Global incident. 

CDK reportedly paid a $25 million ransom to a BlackSuit ransomware affiliate.

Related: Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’

Related: Ford Says Wi-Fi Vulnerability Not a Safety Risk to Vehicles

Related: 16 Car Makers and Their Vehicles Hacked via Telematics, APIs, Infrastructure

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

Explore how attackers are using AI to scale threats and how security teams can respond with AI-driven defenses. Protecting against unmonitored use of generative AI (Shadow AI) in business units and building and enforcing AI governance frameworks.

Register

People on the Move

Opal Security has appointed CPO, CTO, VP of Field Engineering, VP of Marketing, and Head of Product and Solutions Marketing.

The Department of the Air Force has appointed Ashley Devoto as Chief Information Officer.

Bartley Richardson has been named Chief AI and Autonomous Systems Officer at CrowdStrike.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.