8-K/A: Sonic Automotive Reports Material Impact from CDK Cybersecurity Incident on Q2 Earnings

Sonic Automotive experienced a significant negative impact on its second-quarter earnings due to a cybersecurity incident at CDK Global, affecting its information systems.

Summary

• Sonic Automotive experienced disruptions to its information systems due to a cybersecurity incident at CDK Global on June 19, 2024.
• The incident affected Sonic's dealer management system (DMS) and customer relationship management system (CRM), which have since been restored.
• Operational disruptions continued into July, impacting customer lead applications, inventory management, and third-party integrations.
• The company estimates the incident reduced its Q2 GAAP earnings per diluted share by approximately $0.64.
• Sonic's Q2 GAAP earnings per diluted share were $1.18 before the impact of the incident.
• The company does not expect the incident to have a material impact on its financial condition or future operations, beyond the disclosed Q2 impact.

Sentiment

Score: 4

Explanation: The document highlights a significant negative impact on Q2 earnings due to a cybersecurity incident, which is a major concern for investors. While the company states that future impact is not expected, the immediate financial hit is substantial.

Positives

• Access to Sonic's affected information systems, including DMS and CRM, has been restored.
• The company does not expect the incident to have a material impact on its financial condition or future operations, beyond the disclosed Q2 impact.

Negatives

• The cybersecurity incident at CDK Global caused significant operational disruptions for Sonic Automotive.
• The incident had a material negative impact on Sonic's Q2 earnings, reducing GAAP earnings per diluted share by approximately $0.64.
• Operational disruptions continued into July, affecting customer lead applications, inventory management, and third-party integrations.

Risks

• The company's actual results could differ materially from forward-looking statements due to additional findings regarding the impact of the incident.
• CDK's remedial actions and changes in customer sentiment due to the incident could also affect Sonic's results.
• Other risks and factors described in the company's filings with the SEC could impact future performance.

Future Outlook

The company does not expect the incident to have a material impact on its financial condition or future operations, beyond the disclosed Q2 impact. However, actual results could differ due to various factors.

Management Comments

• The company has concluded that the Incident had a material impact on the Company's business during and results of operations for the second fiscal quarter ended June 30, 2024 (Q2).
• Based on the information available to the Company on the date hereof, the Company has concluded that the Incident is not reasonably likely to have a material impact on the Company's financial condition or its current or future business or results of operations, except as disclosed herein.

Industry Context

The cybersecurity incident at CDK Global highlights the vulnerability of automotive dealerships to disruptions in their technology infrastructure. This incident may prompt other dealerships to review their cybersecurity protocols and reliance on third-party providers.

Comparison to Industry Standards

• It is difficult to directly compare this incident to industry standards as cybersecurity breaches vary greatly in scope and impact.
• However, the impact on Sonic's earnings is significant, suggesting a substantial disruption to their operations.
• Other automotive retailers using CDK's services may have experienced similar disruptions, but the financial impact may vary based on their specific circumstances and reliance on CDK's systems.
• Companies like AutoNation and Penske Automotive Group, which also rely on similar technology platforms, may be assessing their own vulnerabilities in light of this incident.

Stakeholder Impact

• Shareholders will be negatively impacted by the reduced Q2 earnings.
• Customers may have experienced disruptions in service due to the operational issues.
• Employees may have faced challenges in their daily work due to the system disruptions.
• Suppliers and other business partners may have experienced delays or disruptions in their interactions with Sonic.

Key Dates

Keywords

cybersecurity, incident, CDK Global, Sonic Automotive, earnings, Q2, DMS, CRM, information systems, operational disruptions