Sonic Automotive Inc discloses a cybersecurity incident (SEC 8-K, July 2024)
As previously disclosed on its Current Report on Form 8-K filed on June 21, 2024, Sonic Automotive, Inc. (the “Company”) has experienced disruptions since June 19, 2024 in its access to certain information systems…
What happened
- As previously disclosed on its Current Report on Form 8-K filed on June 21, 2024, Sonic Automotive, Inc. (the “Company”) has experienced disruptions since June 19, 2024 in its access to certain information systems provided to the Company by CDK Global (“CDK”) due to a cybersecurity incident experienced by CDK (the “Incident”).Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05
- Other Affected Systems, including the CRM and certain functions of the DMS, remain offline as the Company continues to investigate and test such systems.Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05
- Additionally, some third-party applications typically accessible through the Affected Systems also remain offline.Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05
- While the full impact of the Incident on the Company and its results of operations and financial condition are not presently ascertainable, based on the information available to the Company on the date hereof, the Company concluded that the Incident is reasonably likely to have a material impact on the Company’s results of operation for the second fiscal quarter ended June 30, 2024 due to, among other thing, a slo…Form 8-K Item 1.05, Sonic Automotive Inc, filed 2024-07-05
The failure pattern
Watch the pattern: Insufficient segmentation lets a foothold spread
Related standards
CollectSEA's mapping through this incident's failure pattern; not an official determination by the standards bodies.
Building something similar?
Describe your design and see every precedent that applies, with safeguards you can hand to your coding agent.
Incidents with the same pattern
Ransomware shuts down CDK Global's dealer-management platform for about 15,000 dealerships (2024)
Ransomware forced shutdown of core dealer management SaaS platform, halting sales, financing, and parts ordering for 15,000 auto dealerships.
Cyberattack disrupts Johnson Controls' internal IT infrastructure (2023)
Ransomware encrypted virtual hypervisors; halted manufacturing and billing operations incurring $27M in direct remediation costs.
Cyberattack takes Clorox IT systems offline and forces manual order processing (2023)
Ransomware encrypted internal ordering databases; lack of decoupled offline queue forced multi-week manual processing and inventory write-downs.
Access to the Starwood reservation network since 2014 exposes Marriott guest records (2018)
Legacy Starwood database left unsegmented following acquisition; attackers extracted passport numbers and encrypted payment cards of 383M guests.
Major entertainment company hit by an SMB worm with destructive wiper components (2014)
US-CERT alert TA14-353A describes an SMB worm tool used against a major entertainment company that spreads by brute-forcing Windows SMB shares.
Boston Scientific Corp discloses a cybersecurity incident (SEC 8-K, September 2026)
As previously disclosed in a Current Report on Form 8-K filed on August 26, 2026 with the Securities and Exchange Commission, on August 25, 2026, Boston Scientific Corporation (the “ Company ”) identified a cybersecurity…