Findlay Automotive sued over cyberattack

Findlay Cadillac in Henderson is part of Findlay Auto Group which faces legal action due to a ‘cybersecurity issue’ affecting the business.(Ryan Matthey/KLAS)

LAS VEGAS (KLAS) — Customers of Findlay Automotive are suing the company for damages after learning about a cyberattack that could compromise sensitive customer information.

Karen Smith and Pholisith Bouphapraseuth, owners of vehicles purchased from a Findlay dealership, filed the class action lawsuit in Clark County District Court on Wednesday. That was the same day Findlay, which has several locations around the valley, released a statement it was investigating a “cybersecurity issue” and that its sales and service operations would be restricted.

According to the lawsuit, Findlay didn’t safeguard customers’ sensitive information in its computer system making it vulnerable to cyberattacks. The sensitive information was listed as names, addresses, driver’s license, and social security numbers, as well as financial and credit information.

The lawsuit alleges Findlay employees received “ransom notes” on their computers from a ransomware attacker on June 9, 2024. It further states the notes appear to be from the “notorious cybercriminal group ‘Scattered Spider,’” which is known to target large companies and engage in extortion.

The plaintiffs seek damages, restitution, and injunctive relief because they have “suffered and will continue to suffer losses,” the lawsuit stated.