CDK data breach class action
- Who: A former employee at a California car dealership is suing CDK Global, a company that provides software to car dealerships.
- Why: The plaintiff says private and sensitive data that CDK Global held was exposed in a data breach.
- Where: The CDK data breach class action was filed in a California federal court.
A former employee at a California car dealership is suing a company that provided software to the dealership, saying it is responsible for his private and sensitive data being exposed to cybercriminals in a data breach.
Plaintiff Eugene Buraga filed the class action lawsuit against CDK Global LLC on June 24 in a California court, alleging negligence and violations of state and federal consumer laws.
According to the lawsuit, CDK — a retail technology and software provider to thousands of car dealerships across the country — failed to properly safeguard his personally identifiable information that was stored in its network.
As a result, he says a CDK data breach discovered on June 18 has exposed his and others’ full names, addresses, Social Security numbers, driver’s license numbers and financial information to cybercriminals.
Plaintiff gave data to company as requirement of his job, lawsuit says
Buraga is a former employee of a car dealership located in Marin County, California, he says. As a condition of his job, he says he was required to provide his data, including name, address, social security number, and financial information, to his employer.
At the time, his employer was using CDK software to retain his private information in its systems, Buraga says. He says he is very careful with how he shares and stores his private information, and never would have shared it with his employer if he had known of CDK’s allegedly “lax data security practices.”
Buraga says the data breach has opened him up to serious harms, including financial fraud and identity theft.
“The Data Breach has caused Plaintiff Buraga to suffer fear, anxiety, and stress, which has been compounded by the fact that Defendant has still not fully informed him of key details about the Data Breach’s occurrence,” the lawsuit says.
Data breach was preventable, lawsuit says
Buraga says he is seeking justice for himself and others impacted by the breach, who will likely now need to spend significant time and effort securing their accounts and ensuring they haven’t fallen victim to cybercrime.
“Defendant could have prevented the Data Breach… by properly securing and encrypting and/or more securely encrypting its servers,” he argues.
He’s looking to represent anyone in the United States whose data was exposed to unauthorized third parties as a result of the ransomware attack suffered by CDK in June 2024.
Buraga is suing for negligence, breach of implied contract, unjust enrichment and violations of state consumer protection laws. He is seeking certification of the class action, damages, fees, costs and an order forcing the company to improve its data security practices.
In a similar case, Nissan North America experienced a data breach last year that exposed the personal information of more than 53,000 of its current and former employees. The automaker said In a data breach notification submitted to the Office of the Maine Attorney that it discovered details about the data breach Feb. 28, 2024, after learning in November that it was the victim of a targeted cyberattack.
Were you affected by the CDK data breach? Let us know in the comments!
The plaintiff is represented by Matthew J. Langley and David S. Almeida of Almeida Law Group LLC and Daniel Srourian of Srourian Law Firm P.C.
The CDK Global class action lawsuit is Eugene Buraga v. CDK Global LLC, Case No. 1:24-cv-05273 in the U.S. District Court for the Northern District of Illinois.
Don’t Miss Out!
Check out our list of Class Action Lawsuits and Class Action Settlements you may qualify to join!
Read About More Class Action Lawsuits & Class Action Settlements:
8 thoughts onClass action claims CDK data breach affected car dealerships, customers, employees nationwide
How do I join the class action suet? I have been employed by multiple big corporations that use CDK since 2014
I work for Toyota and they use CDK and I hope my personal information is not out there
I had my Kia at the dealership for repairs, 2 days nothing. Called no answers went up there to find out they were hacked and nothing was being done. Still didnt get car diagnosed because they didnt know when they would be up again. I bought my car there, service work. My information is definitely in the system exposed
Husband, daughter and nephew have or is still employees and my entire family has purchased multiple cars/trucks. We are all at risk, why information like this isn’t safe g
I work for dealership that uses cdk and formally worked for another that was a test dealership more than 10 years ago when cdk wanted to branch into the car business with their software. I’m sure all my info has been compromised plus the fact that I lost out on pay from my employer due to the attack. Now I could wind up behind on my bills.
Employee of dealership using CDK and also purchased and leased multiple vehicles as a customer of same dealership along with multiple family members. So not only stress and anxiety working through the crisis and shutdown of computer systems while expectations of performing sales and customer service but also knowing all of my personal, sensitive information was exposed along with many family members and customers.
Add me.
How do I join the class action suet? I have been employed by multiple big corporations that use CDK since 2014