2024-12-13 LKQ CORP Cybersecurity Incident

Page last updated on December 13, 2024

LKQ CORP initially disclosed a cybersecurity incident in an SEC 8-K filing on 2024-12-13 17:01:32 EST.

Company Summary

LKQ Corporation is the largest nationwide provider of alternative collision replacement parts and a leading provider of recycled engines.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date:
Detected Date: 2024-11-13
Disclosure Date: 2024-12-13
Contained Date: 2024-12-13
Recovered Date: 2024-12-13

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2024-12-13

LKQ CORP filed an 8-K at 2024-12-13 17:01:32 EST
Accession Number: 0001065696-24-000134

Item 8.01 Other Events.

On November 13, 2024, LKQ Corporation (the “Company” or “we”) detected unauthorized access to information technology (IT) systems of a single business unit in Canada (“Business Unit”). The attack disrupted the Business Unit’s operations.

Upon discovery, we immediately began taking steps to investigate, contain, and recover from the incident, including activating our security incident response and recovery plans, partnering with industry leading forensic investigators, and initiating containment measures for affected systems. We also promptly notified law enforcement authorities. We are analyzing data impacted by the incident and will be notifying affected parties as appropriate.

As a result of the incident, the Company’s operations within this Business Unit were adversely impacted for a few weeks while affected systems were recovered; however, the Company believes that it has effectively contained the threat and that none of its other businesses were impacted by the threat, and the Business Unit is now operating near full capacity.

As of the date of this filing, we believe the impacts of the cyber incident are not, and are not reasonably likely to be, material to our financial condition or results of operations for the fiscal year. We will be seeking reimbursement of costs, expenses, and losses stemming from the cyber incident by submitting claims to our cybersecurity insurers. The timing and amount of any such reimbursements is not known at this time.

Company Information