CDK Global Cyber Attack : What You Need to Know About the Shutdown Affecting 15,000 Dealerships

By /
CDK Global

In a significant blow to the automotive industry, CDK Global, a leading provider of dealership management systems (DMS) in the U.S., experienced a substantial cyberattack that has disrupted operations for approximately 15,000 car dealerships nationwide. This incident halted sales and other critical services at numerous auto dealerships, including those under prominent brands like General Motors and Group 1 Automotive.

What Happened in CDK Global?

The cyberattack on CDK Global was first detected in the early hours of June 19. The company, which provides essential software for managing sales, payroll, inventory, and office operations for auto dealerships, responded by shutting down most of its systems to prevent further damage and to protect customer data. This proactive measure, while necessary, has left many dealerships scrambling to find alternative ways to conduct business.

According to CDK’s Senior Director of Communications, Tony Macrito, the shutdown was a precautionary step to safeguard clients and allow for a comprehensive investigation. Dealerships were notified about the cyber incident around 2 a.m. Eastern Time, with a detailed update provided at 8 a.m. confirming the attack and explaining the reasons behind the shutdown.

Impact on Dealerships

The shutdown has severely impacted dealerships’ ability to conduct business as usual. Employees from various dealerships took to Reddit to share their experiences, revealing that they had to resort to using spreadsheets and sticky notes to manage small transactions and repairs. However, major sales and transactions were effectively on hold, causing significant disruptions.

One Reddit user from a dealership in Wisconsin noted, “Our whole shop runs on CDK, and with the system down, we can’t process any major transactions.” This sentiment was echoed by others across the country, highlighting the widespread reliance on CDK’s systems for daily operations.

CDK’s Response and Recovery Efforts

CDK Global has been working diligently to restore its systems. By Wednesday afternoon, the company announced that it had successfully restored its core dealer management system (DMS) and Digital Retailing solutions. However, extensive testing on other applications was still ongoing to ensure complete system integrity and security.

A spokeswoman for CDK told CBS News, “Out of an abundance of caution and concern for our customers, we have shut down most of our systems and are working diligently to get everything up and running as quickly as possible.” The company’s resolve to address the problem and put the safety of its customers first is reaffirmed in this statement.

Who is CDK Global?

CDK Global is a major player in the automotive industry, providing software solutions that help dealerships manage various aspects of their business, including payroll, inventory, and office operations. The company’s dealer management system (DMS) is a central hub that allows businesses to monitor and manage operations from a single interface. CDK also offers digital retailing tools that enable dealerships to conduct transactions both online and in showrooms.

Interestingly, CDK Global touts its cybersecurity capabilities on its website, highlighting a three-tiered strategy designed to prevent, protect, and respond to cyberattacks. This incident, however, demonstrates the growing challenge of maintaining robust cybersecurity defenses in an increasingly digital world.

The Broader Implications

The CDK Global cyberattack is not an isolated incident. It follows a similar attack on Findlay Automotive Group just over a week earlier, which also disrupted operations for several days. These attacks highlight the vulnerability of critical systems within the automotive industry and the need for enhanced cybersecurity measures.

Erik Nachbahr, President of Helion Technologies, a cybersecurity services provider, praised CDK’s decision to shut down its systems. He noted that this action was crucial for containing the incident and conducting a thorough investigation. Nachbahr emphasized the importance of robust cybersecurity protocols for auto dealers to mitigate such risks.

Moving Forward

As CDK Global continues to work on restoring its systems, dealerships are urged to stay updated on the situation. CDK has provided a link for clients to register and receive updates on the status of the cyberattack and the recovery process. The company’s swift response and transparent communication with its clients have been critical in managing the fallout from this incident.

In conclusion, the CDK Global cyberattack serves as a stark reminder of the vulnerabilities that exist in today’s digital landscape. It underscores the importance of cybersecurity and the need for businesses to be prepared for such incidents. As the automotive industry continues to rely heavily on digital systems for operations, strengthening cybersecurity defenses will be paramount in preventing future disruptions.

By staying informed and prepared, dealerships can better navigate the challenges posed by cyber threats and ensure continued operations even in the face of adversity.

Read Next: 

Leave a Comment

Your email address will not be published. Required fields are marked *

error: Content is protected !!
Scroll to Top