F500 Auto & Dealerships · Automotive Retailing, Services · Regulatory action
Group 1 Automotive
Headline
Activated cyber incident response procedures and disclosed CDK-related disruption to the SEC.
Not independently verified. Verification status: Unverified - heuristic first draft. Publish state: draft unverified.
Activated cyber incident response procedures and disclosed CDK-related disruption to the SEC. Group 1 operates in both the US and UK, which means its customer data sits under two materially different privacy regimes - GDPR on one side and a state-by-state patchwork on the other - with UK customers holding enforceable rights their American counterparts do not. Same connected CDK event.
- Severity
- Evidence tierUnassigned
- Claims confirmed
- Last verified2026-08-04
Primary source. None recorded — Unverified - heuristic first draft.
Terms
Arbitration
Not independently confirmed this pass — standard binding arbitration + class action waiver expected.
Data sharing
Not independently confirmed this pass with a specific named data-privacy lawsuit or breach; recommend checking against the general used-car-retailer consumer-protection pattern documented for AutoNation and CarMax elsewhere in this tab, given the structural similarity of large multi-brand dealership groups.
Fees and billing
Not itemized this pass.
Contacts
Privacy contact. Not recorded.
Legal notice. Not verified this pass. If publicly traded: SEC Form 10-K cover page gives the official corporate address; the Secretary of State business-entity search in the state of incorporation gives the registered agent, which must accept service. If private: the state registered agent is usually the only reliable route.
Mailing address. Not recorded.
Evidence
No claims have been itemized for this row yet.
No sources are on file for this row yet.
Source vault
Link status: Candidate - not yet fetched
| Document | Last fetch | |
|---|---|---|
| Privacy policy group1auto.com/privacy-policy | Not fetched yet | NO (HTML only) |
| Terms of service group1auto.com/terms-of-use | Not fetched yet | NO (HTML only) |
| Website No URL recorded | Not fetched yet | — |
| Primary source No URL recorded Verification: Unverified - heuristic first draft | Not fetched yet | — |
Enforcement
No enforcement actions are linked to this row.
State statute
No HQ state on file, so no state statute applies by headquarters.