Victorian automotive dealership group Penfold Motors confirmed it is investigating a contained cyber security incident involving an external software provider. The incident resulted from ransomware threat group 'Storm' gaining unauthorized access via a third-party IT vendor environment. Penfold Motors established dedicated customer support channels, notified the Australian Cyber Security Centre (ACSC) and the Office of the Australian Information Commissioner (OAIC), and engaged external cyber security experts to secure operational systems and assess potential data exposure.