AutoCanada Hit by Cyberattack

Last week, AutoCanada, a major Canadian car dealership, disclosed a cyber-attack that may result in disruptions. The incident was discovered on 11 August 2024, and it impacted some internal IT systems, the company reported. “Immediately upon detecting the incident, AutoCanada took action to safeguard its network and data. This included engaging with leading cybersecurity experts to assist us with containment and remediation efforts and conducting a thorough investigation to understand the scope and impact of the incident,” AutoCanada[1] said. “As the investigation is ongoing, the full scope, nature, and impact of the incident, including the extent to which any customer, supplier, or employee data has been accessed, is not yet known. Although our business operations remain open, the incident may result in disruptions until the relevant systems are fully restored,” it added. While it has not shared any additional information on the cyber incident, the company’s description suggests that it may have been targeted in a ransomware attack.[2]

See: https://redskyalliance.org/xindustry/north-american-auto-dealers-impacted

AutoCanada operates 70 dealerships in Canada and 18 in Illinois, in the United States, selling tens of thousands of new and used vehicles yearly. On the same day it announced the cybersecurity incident, AutoCanada revealed that its financial results for the second quarter of 2024 were negatively impacted by the recent ransomware attack suffered by CDK Global.

Many car dealerships in North America were forced to use pen and paper in June after cybercriminals breached the systems of CDK Global, which provides software for thousands of auto dealers in the US and Canada. Another car dealership, Florida-based AutoNation[3], reported lower quarterly earnings due to the CDK Global incident.

This article is shared at no charge and is for educational and informational purposes only.

Red Sky Alliance is a Cyber Threat Analysis and Intelligence Service organization. We provide indicators of compromise information via a notification service (RedXray) or an analysis service (CTAC). For questions, comments, or assistance, please get in touch with the office directly at 1-844-492-7225 or feedback@redskyalliance.com