Automotive Supplier LKQ Hit by Cyberattack in Canadian Business Unit

LKQ Corporation, a major US-based provider of auto parts, informed the SEC late last week that a recent cyberattack caused disruptions at a Canadian business unit. LKQ provides parts for repairing and accessorizing consumer cars and other vehicles. The company has 1,600 locations across two dozen countries, and a total of 45,000 employees. In an 8-K filing with the SEC, the company revealed that it detected unauthorized access to IT systems at a single business unit in Canada on November 13. The cyberattack caused disruptions at the impacted business unit for “a few weeks”, but the unit is now operating near full capacity and the threat is believed to have been contained.  “As of the date of this filing, we believe the impacts of the cyber incident are not, and are not reasonably likely to be, material to our financial condition or results of operations for the fiscal year,” LKQ said . “We will be seeking reimbursement of costs, expenses, and losses stemming from the cyber incident by submitting claims to our cybersecurity insurers,” LKQ added. Advertisement. Scroll to continue reading. It’s unclear whether the attack was conducted by a ransomware group. No known threat actors have taken credit for the LKQ cyberattack, but that does not completely rule out ransomware (companies that pay a ransom are not named on leak websites). SecurityWeek has reached out to LKQ for more information and will update this article if the company responds.  Related : Unpatched Vulnerabilities Allow Hacking of Mazda Cars Related : Millions of Kia Cars Were Vulnerable to Remote Hacking Related : Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider Written By Eduard Kovacs Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering. Meta Paid $78,000 Bounty for Vulnerability Exposing Customer Support Data Exploitation of ServiceNow Vulnerability Seen Days After Disclosure SonicWall Zero-Days Exploited to Deliver Custom Malware for Weeks Before Patch New Index Tracks Material Breaches — And Refuses to Add Up the Losses WP2Shell WordPress Vulnerabilities Exploited in the Wild Two Scattered Spider Hackers Sentenced to Jail in UK ‘ClickLock Stealer’ Bypasses macOS Security With Social Engineering, Process Killing China’s Top Cybersecurity Firms Hit by Mounting Military Procurement Bans Endpoint Security Firm Glow Launches With $180M in Funding at $1.2B Valuation Oracle Patches Over 1,400 Vulnerabilities With Quarterly Security Updates Ransomware Group Threatening to Leak Data Stolen From Coca-Cola’s Fairlife OpenAI Says Its AI Models Broke Loose and Hacked Hugging Face Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains Cisco Launches Low-Cost AI Models for Source Code Security Empirical Security Raises $25 Million in Series A Funding SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity Join this live webinar as we explore why exploitation is outpacing remediation, where risk is growing fastest, and what security leaders can do to close the gap before attackers take advantage. CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Jazz has named Sean Robinson, Rickie Goyal, Danielle Guetta, Shani Nago, and Lior Magram as VPs and Michael Calev as COO.

Shadow Tier lists Dec 19, 2024 as the signal date.

Lkqcorp is the organization connected to this public signal.

This signal is connected to current ransomware incidents based on its reported incident context.

This signal is connected to data exposure and breach intelligence based on its reported consequences.