8-K: AutoNation Reports Cyber Incident Impacting Q2 Earnings, Expects $1.50 Per Share Hit

AutoNation estimates a $1.50 per share negative impact on Q2 2024 earnings due to a cyber incident at a third-party provider, despite restoring core systems.

Summary

• AutoNation experienced a cyber incident at CDK Global, a third-party provider, which disrupted their dealer management system (DMS) and core business functions.
• The incident caused outages affecting sales, service, inventory, customer relationship management, and accounting.
• While core systems have been restored, some ancillary systems remain limited, with full restoration expected by the end of July 2024.
• AutoNation estimates a negative impact of approximately $1.50 per share on Q2 2024 earnings due to the incident.
• This impact is split between lost income and one-time costs, primarily guaranteed compensation for commission-based associates.
• The company expects GAAP earnings per share for Q2 2024 to range between $3.15 and $3.30 after accounting for the negative impact.
• AutoNation will release its full financial results for the quarter ended June 30, 2024, on July 31, 2024.

Sentiment

Score: 4

Explanation: The sentiment is negative due to the significant financial impact of the cyber incident, although the company is working to restore systems and mitigate long-term damage. The negative impact on earnings is a concern.

Positives

• Core systems have been restored following the cyber incident.
• The company expects to fully restore all systems by the end of July 2024.
• The incident is not expected to have a material impact on AutoNation's overall financial condition or ongoing operations.

Negatives

• The cyber incident at CDK Global caused significant disruption to AutoNation's operations.
• The incident is expected to negatively impact Q2 2024 earnings by approximately $1.50 per share.
• Some ancillary systems remain unavailable or limited, although this is not expected to have a material impact.

Risks

• The full scope and impact of the cyber incident are still being assessed.
• There is a risk that actual financial results may differ materially from the preliminary estimates.
• The company faces potential risks related to data compromise, legal issues, and reputational damage from the incident.
• The company's ability to mitigate the impact of the incident and fully restore systems is uncertain.

Future Outlook

AutoNation expects to complete the restoration of all impacted systems by the end of July 2024 and does not expect the incident to have a material impact on its overall financial condition or ongoing results of operations.

Management Comments

• We immediately took precautionary containment steps to help protect our systems and data, implemented business continuity plans, and commenced a review of the potential impact of the incident.
• While the full scope, nature, and impact of the incident is yet to be known, we do not expect the incident to have a material impact on AutoNations overall financial condition or on its ongoing results of operations.

Industry Context

The cyber incident at CDK Global highlights the vulnerability of automotive dealerships to third-party technology providers and the potential for significant business disruption. This event may prompt other dealerships to review their cybersecurity protocols and reliance on single providers.

Comparison to Industry Standards

• It is difficult to directly compare this incident to industry standards as cyber incidents are often unique and their impacts vary widely.
• However, the impact on AutoNation's earnings per share is significant, and other companies in the automotive retail sector will likely be monitoring this situation closely.
• Other companies such as Penske Automotive Group and Group 1 Automotive may be reviewing their own cybersecurity measures in light of this event.
• The speed of recovery and the limited long term impact will be key metrics to compare to other companies that have experienced similar incidents.

Stakeholder Impact

• Shareholders will be impacted by the reduced earnings per share for Q2 2024.
• Employees may have experienced disruption during the system outages.
• Customers may have experienced delays or inconveniences due to the disruption of core functions.
• Suppliers may have experienced delays in ordering and payment processes.

Next Steps

• AutoNation will continue to restore ancillary systems and integrations.
• The company will release its full financial results for Q2 2024 on July 31, 2024.
• AutoNation will discuss the results and other information during a conference call and audio webcast on July 31, 2024.

Key Dates

Keywords

cyber incident, AutoNation, CDK Global, earnings per share, DMS, financial results, system outage, Q2 2024, cybersecurity, business disruption