2024-06-14 ADVANCE AUTO PARTS INC Cybersecurity Incident

Page last updated on June 19, 2024

ADVANCE AUTO PARTS INC initially disclosed a cybersecurity incident in an SEC 8-K filing on 2024-06-14 16:07:20 EDT.

Incident Details

Material: Unknown
Is Breach: TRUE
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2024-05-23
Disclosure Date: 2024-06-14
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: $3M - $3M

• Aggregated costs (Direct): $3M - $3M - The Company has insurance for cyber incidents and currently expects its costs related to response and remediation to be generally limited to its retention under such policy. The Company currently plans to record an expense of approximately $3 million for the quarter ending July 13, 2024 for such costs.

Filings

8-K filed on 2024-06-14

ADVANCE AUTO PARTS INC filed an 8-K at 2024-06-14 16:07:20 EDT
Accession Number: 0001158449-24-000162

Item 8.01 Other Events.

On May 23, 2024, Advance Auto Parts, Inc. (the “Company”) identified unauthorized activity within a third-party cloud database environment containing Company data and launched an investigation with industry-leading experts. On June 4, 2024, a criminal threat actor offered what it alleged to be Company data for sale. The Company has notified law enforcement.

There has been no material interruption to the Company’s business operations due to the incident.

Based on the review of files determined to have been impacted, the Company believes that some files contain personal information, including but not limited to social security numbers or other government identification numbers of current and former job applicants and employees of the Company. The Company anticipates providing notice of the incident, in accordance with its legal obligations and will offer free credit monitoring and identity restoration services as appropriate.

The Company has insurance for cyber incidents and currently expects its costs related to response and remediation to be generally limited to its retention under such policy. The Company currently plans to record an expense of approximately $3 million for the quarter ending July 13, 2024 for such costs.

The information provided in this Current Report on Form 8-K is preliminary and is based on currently available information and is subject to change during the course of the Company’s ongoing investigation of the incident.

Company Information