Group 1 Automotive Provides Statement on CDK Cybersecurity Incident

Cybersecurity Incident Impact - The cybersecurity incident experienced by CDK Global LLC has disrupted Group 1 Automotive's business applications and processes in its U.S. operations that rely on CDK's dealers' systems [5] - Group 1 immediately activated its cyber incident response procedures and took measures to protect and isolate its systems from CDK's platform [1] - All Group 1 U.S. dealerships continue to conduct business using alternative processes until CDK's systems are restored [1] - Group 1's U.K. dealerships are not impacted by the CDK service outage as they do not use CDK's systems [1] Company Overview - Group 1 Automotive, Inc. is a Fortune 300 automotive retailer with 202 dealerships located in the U.S. and U.K. [5] - The company owns and operates 202 automotive dealerships, 264 franchises, and 42 collision centers offering 35 brands of automobiles [9] - Through its dealerships and omni-channel platform, Group 1 sells new and used cars and light trucks, arranges vehicle financing, sells service and insurance contracts, provides maintenance and repair services, and sells vehicle parts [9] Response and Monitoring - Group 1's associates are focused on delivering the best possible customer experience during the outage [6] - The company is closely monitoring the situation and will take additional action if necessary [8] - CDK has advised that the restoration of the dealer management system will require several days, not weeks, but the timing for other impacted applications remains unclear [8] Additional Information - Group 1 discloses additional information about the company, its business, and its results of operations on its websites and social media platforms [7]