Auto Parts Maker, LKQ, Suffers Another Attack

December 18, 2025

INCIDENT

Antioch, Tennessee-based LKQ Corporation, an auto parts distributor and maker of a some parts, suffered a cyberattack as a result of a third party vulnerability in August where victims’ personally identifiable information ended up stolen in the hack.
Oracle announced a number of security vulnerabilities, including a previously unknown vulnerability in its E-Business Suite application, used by LKQ and other organizations worldwide. In early October, LKQ’s security team became aware of a third party exploiting these vulnerabilities.
This is the second attack LKQ suffered in a year.

Incident Date

October 3, 2025

Estimated Cost

Unknown at this time

Victims

Type of Malware

No Malware identified

Threat Source

No threat source identified