Class-action Lawsuit Follows Cyberattack at Findlay Automotive

December 6, 2024

INCIDENT

Findlay Automotive shared that a June 10 cybersecurity issue impacted its sales and service departments. Since June 10, Findlay Automotive hasn’t shared much information on the nature of the ransomware attack or the impact on its customers. The company said vehicle sales couldn’t be finalized, service appointments couldn’t be scheduled online and only cash payments could be accepted. The company didn’t answer questions on when its systems got back to normal or how it was able to return to normal.

In the wake of the cyberattack, the company was hit with two class-action lawsuits last month that allege Findlay Automotive didn’t properly protect customers’ sensitive financial and personal information.

It is unknown at this time if this attack was part of the widespread CDK attack reported a month later.

Incident Date

June 10, 2024

Estimated Cost

Class-action lawsuit pending

Type of Malware

No Malware identified

Threat Source

No threat source identified