Security News > 2024 > June > CDK Global cyberattack cripples 15,000 US auto dealerships
CDK Global, a software-as-a-service provider for car dealers and auto equipment manufacturers, has suffered a cyberattack that has temporarily disrupted its customers' operations.
CDK's platform is used by 15,000+ car dealerships across North America to manage their sales, customer relationships, financing, inventory, customer support, and other aspects of their day-to-day operations.
The customers use locally installed apps to access the CDK platform, and round-the-clock access to the platform and CDK data centers is made possible via a cloud-based SD-WAN and a VPN solution.
The first attack apparently started on the night of June 18h. While CDK has yet to release an official statement on their website and its social media accounts, its customers have been contacted and provided with preliminary information and instructions on what to do.
CDK reacted by shuting down their systems as a matter of precaution, advised customers to shut down access to their dealer management system and called in third-party cybersecurity experts to help with the investigation and remediation.
"With the work done, we are confident the CDK Phones, DMS and Digital Retail have been restored. Both Unify and DMS direct login access are available. We are continuing to conduct extensive tests on all other applications, and we will be providing updates as we bring those applications back online," the company explained.