Breach taxonomy
Summary
On November 13, 2024, LKQ Corporation detected unauthorized access to IT systems of a single business unit in Canada. The attack disrupted that business unit's operations for a few weeks while affected systems were recovered. LKQ activated its security incident response and recovery plans, engaged forensic investigators, and notified law enforcement. No other business units were impacted. The business unit was operating near full capacity by the filing date. LKQ intends to submit claims to its cybersecurity insurers for reimbursement of costs and losses. Filed under Item 8.01; company determined the incident was not material.
Tagging rationale
ThreatUnknown
Filing does not attribute the incident to a specific actor → UNKNOWN.
MethodsMalware
Unauthorized access to IT systems disrupting business unit operations is consistent with malware deployment → MALWARE.