CDK data breach class action
- Who: A former employee at a California car dealership is suing CDK Global, a company that provides software to car dealerships.
- Why: The plaintiff says private and sensitive data that CDK Global held was exposed in a data breach.
- Where: The CDK data breach class action was filed in a California federal court.
A former employee at a California car dealership is suing a company that provided software to the dealership, saying it is responsible for his private and sensitive data being exposed to cybercriminals in a data breach.
Plaintiff Eugene Buraga filed the class action lawsuit against CDK Global LLC on June 24 in a California court, alleging negligence and violations of state and federal consumer laws.
According to the lawsuit, CDK — a retail technology and software provider to thousands of car dealerships across the country — failed to properly safeguard his personally identifiable information that was stored in its network.
As a result, he says a CDK data breach discovered on June 18 has exposed his and others’ full names, addresses, Social Security numbers, driver’s license numbers and financial information to cybercriminals.
Plaintiff gave data to company as requirement of his job, lawsuit says
Buraga is a former employee of a car dealership located in Marin County, California, he says. As a condition of his job, he says he was required to provide his data, including name, address, social security number, and financial information, to his employer.
At the time, his employer was using CDK software to retain his private information in its systems, Buraga says. He says he is very careful with how he shares and stores his private information, and never would have shared it with his employer if he had known of CDK’s allegedly “lax data security practices.”
Buraga says the data breach has opened him up to serious harms, including financial fraud and identity theft.
“The Data Breach has caused Plaintiff Buraga to suffer fear, anxiety, and stress, which has been compounded by the fact that Defendant has still not fully informed him of key details about the Data Breach’s occurrence,” the lawsuit says.
Data breach was preventable, lawsuit says
Buraga says he is seeking justice for himself and others impacted by the breach, who will likely now need to spend significant time and effort securing their accounts and ensuring they haven’t fallen victim to cybercrime.
“Defendant could have prevented the Data Breach… by properly securing and encrypting and/or more securely encrypting its servers,” he argues.
He’s looking to represent anyone in the United States whose data was exposed to unauthorized third parties as a result of the ransomware attack suffered by CDK in June 2024.
Buraga is suing for negligence, breach of implied contract, unjust enrichment and violations of state consumer protection laws. He is seeking certification of the class action, damages, fees, costs and an order forcing the company to improve its data security practices.
In a similar case, Nissan North America experienced a data breach last year that exposed the personal information of more than 53,000 of its current and former employees. The automaker said In a data breach notification submitted to the Office of the Maine Attorney that it discovered details about the data breach Feb. 28, 2024, after learning in November that it was the victim of a targeted cyberattack.
Were you affected by the CDK data breach? Let us know in the comments!
The plaintiff is represented by Matthew J. Langley and David S. Almeida of Almeida Law Group LLC and Daniel Srourian of Srourian Law Firm P.C.
The CDK Global class action lawsuit is Eugene Buraga v. CDK Global LLC, Case No. 1:24-cv-05273 in the U.S. District Court for the Northern District of Illinois.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
47 thoughts onClass action claims CDK data breach affected car dealerships, customers, employees nationwide
I was affected by these breaches I just found out about. Dave( Evolve( never contacted me. My personal information included SSN is on the dark web. I was alerted by an app. Ive had accounts open in my name without my knowledge for online loans, amusement parks, concert tickets, etc. Please help!!
Myself and others were working for a company that supported CDK service provided auto dealerships lost our jobs as a result of the CDK data breach shutdown which resulted in a significant loss of revenue.
My mother was affected by this she lives in little Rock Arkansas
My credit wise report sent me 4 alerts that my SS , name, address, and phone # were found on the dark web. I work at a dealership and we were affected by CDK global hack. Could this be a result of this?