The theft claim follows an IT breach from August. The publicly traded dealership group did not confirm being held for ransom.