Please ensure Javascript is enabled for purposes of website accessibility

7.3 Magnitude Earthquake Strikes Off Alaska Coast. No Danger to California

8 hours ago

Federal Immigration Crackdown Threatens California’s Historic Housing Reforms

12 hours ago

US House Clears Procedural Hurdle on Cryptocurrency Legislation

12 hours ago

Fresno County Lifts Evacuation Order for Max Fire Near Pine Flat Lake

13 hours ago

Newsom Calls Trump a ‘Son of a B***h’ Over ICE Raids and Guard Deployment

14 hours ago

Trump Indicated to Republican Lawmakers He Will Fire Fed’s Powell, CBS Reports

15 hours ago

Wall Street Steadies as Investors Assess Inflation Data, Earnings

15 hours ago

Trump Administration Sued by US States for Cutting Disaster Prevention Grants

15 hours ago

Open Mic Contest Offers Fans a Chance to Perform at Outside Lands 2025

17 hours ago

PBS and NPR Mount Last-Ditch Fight to Save Federal Funding

2 days ago
Car Dealerships in North America Revert to Pens and Paper After Cyberattacks on Software Provider
gvw_ap_news
By Associated Press
Published 1 year ago on
June 24, 2024

North American car dealerships are grappling with disruptions due to cyberattacks on a key software provider, CDK Global. (AP File)

Share

Getting your Trinity Audio player ready...

NEW YORK — Car Dealerships in North America Are Still Wrestling with Major Disruptions That Started Last Week with Cyberattacks on a Company Whose Software Is Used Widely in the Auto Retail Sales Sector.

CDK Global, a company that provides software for thousands of auto dealers in the U.S. and Canada, was hit by back-to-back cyberattacks Wednesday. That led to an outage that has continued to impact operations.

For prospective car buyers, that’s meant delays at dealerships or vehicle orders written up by hand. There’s no immediate end in sight, but CDK says it expects the restoration process to take “several days” to complete.

On Monday, Group 1 Automotive Inc., a $4 billion automotive retailer, said it is using “alternative processes” to sell cars to its customers. Lithia Motors and AutoNation, two other dealership chains, also disclosed that they implemented workarounds to keep their operations going.

What Is CDK Global?

CDK Global is a major player in the auto sales industry. The company, based just outside of Chicago in Hoffman Estates, Illinois, provides software technology to dealers that helps with day-to-day operations — like facilitating vehicle sales, financing, insurance and repairs.

CDK serves more than 15,000 retail locations across North America, according to the company.

What Happened Last Week?

CDK experienced back-to-back cyberattacks on Wednesday. The company shut down all of its systems after the first attack out of an abundance of caution, according to spokesperson Lisa Finney, and then shut down most systems again following the second.

“We have begun the restoration process,” Finney said in an update over the weekend — noting that the company had launched an investigation into the “cyber incident” with third-party experts and notified law enforcement.

“Based on the information we have at this time, we anticipate that the process will take several days to complete, and in the interim we are continuing to actively engage with our customers and provide them with alternate ways to conduct business,” she added.

In messages to its customers, the company has also warned of “bad actors” posing as members or affiliates of CDK to try to obtain system access by contacting customers. It urged them to be cautious of any attempted phishing.

The incident bore all the hallmarks of a ransomware attack, in which targets are asked to pay a ransom to access encrypted files. But CDK declined to comment directly — neither confirming or denying if it had received a ransom demand.

“When you see an attack of this kind, it almost always ends up being a ransomware attack,” Cliff Steinhauer, director of information security and engagement at the National Cybersecurity Alliance. “We see it time and time again unfortunately, (particularly in) the last couple of years. No industry and no organization or software company is immune.”

Are Impacted Dealerships Still Selling Cars?

Several major auto companies — including Stellantis, Ford and BMW — confirmed to The Associated Press last week that the CDK outage had impacted some of their dealers, but that sales operations continue.

In light of the ongoing situation, a spokesperson for Stellantis said Friday that many dealerships had switched to manual processes to serve customers. That includes writing up orders by hand.

A Ford spokesperson added that the outage may cause “some delays and inconveniences at some dealers and for some customers.” However, many Ford and Lincoln customers are still getting sales and service support through alternative routes being used at dealerships.

“The people who’ve been around longer — you know, guys who have maybe a little salt in their hair like me — we remember how to do it before the computers,” said John Crane of Hawk Auto Group, a Westmont, Illinois-based dealership operator that uses CDK. “It’s just a few more steps and a little bit more time.”

Although impacted Hawk Auto dealerships are still able to serve customers by “going back to the basics,” Crane added that those working in administration are still “pulling out our hair.” He notes that there are now stacks of paper awaiting processing — in place of orders that went through automatically on a computer overnight.

Group 1 Automotive Inc. said Monday that the incident has disrupted its business applications and processes in its U.S. operations that rely on CDK’s dealers’ systems. The company said that it took measures to protect and isolate its systems from CDK’s platform.

In regulatory filings, Lithia Motors and AutoNation disclosed that last week’s incident at CDK had disrupted their operations as well.

Lithia said it activated cyber incident response procedures, which included “severing business service connections between the company’s systems and CDK’s.” AutoNation said it also took steps to protect its systems and data, adding that all of its locations remain open “albeit with lower productivity,” as many are served manually or through alternative processes.

How Can I Protect Myself?

With many details of the cyberattacks still unclear, customer privacy is also at top of mind — especially with little known about what information may have been compromised this week.

If you’ve bought a car from a dealership that’s used CDK software, cybersecurity security experts stress that it’s important to assume your data may have been breached. That could potentially include “pretty sensitive information,” Steinhauer noted, like your social security number, employment history, income and current or former addresses.

Those impacted should monitor their credit — or even freeze their credit as an added layer of defense — and consider signing up for identify theft monitor insurance. You’ll also want to be wary of any phishing attempts. It’s best to make sure you have reliable contact information for a company by visiting their official website, for example, as scammers sometimes try to take advantage of news about data breaches to gain your trust through look-alike emails or phone calls.

Those are some best practices to keep in mind whether you’re a victim of CDK’s data breach or not, Steinhauer said. “Unfortunately, in this day and age, our data is a valuable target — and you have to make sure that you’re taking steps to protect it,” he said.

RELATED TOPICS:

DON'T MISS

What Are Fresno Real Estate Experts Predicting for 2025 and Beyond?

DON'T MISS

First California EV Mandates Hit Automakers This Year. Most Are Not Even Close

DON'T MISS

Trump Says He Is Ending Government Funding California’s High-Speed Rail Project

DON'T MISS

Bakersfield Tax Return Preparer Pleads Guilty in $25 Million Fraud Scheme

DON'T MISS

Congressional Hopeful Lorenzo Rios Says No to PBS Funding. Once Led Local Station

DON'T MISS

US Attorney Beckwith Dismissed by Trump Admin, Replaced With Sanchez

DON'T MISS

Trump Says He Would Love for Fed Chair Powell to Resign

DON'T MISS

Trump Says Coca-Cola Agreed to Use Real Cane Sugar in US

DON'T MISS

7.3 Magnitude Earthquake Strikes Off Alaska Coast. No Danger to California

DON'T MISS

US Renewable Power Transmission Project Under Fire From Farmers

DON'T MISS

Fresno Detectives Nab Murder Suspect With Help From Riverside Sheriff’s Deputies

DON'T MISS

Bains Is Challenging Valadao. An Early Look at Fundraising.

UP NEXT

Bakersfield Tax Return Preparer Pleads Guilty in $25 Million Fraud Scheme

UP NEXT

Congressional Hopeful Lorenzo Rios Says No to PBS Funding. Once Led Local Station

UP NEXT

US Attorney Beckwith Dismissed by Trump Admin, Replaced With Sanchez

UP NEXT

Trump Says He Would Love for Fed Chair Powell to Resign

UP NEXT

Trump Says Coca-Cola Agreed to Use Real Cane Sugar in US

UP NEXT

7.3 Magnitude Earthquake Strikes Off Alaska Coast. No Danger to California

UP NEXT

US Renewable Power Transmission Project Under Fire From Farmers

UP NEXT

Fresno Detectives Nab Murder Suspect With Help From Riverside Sheriff’s Deputies

UP NEXT

Bains Is Challenging Valadao. An Early Look at Fundraising.

UP NEXT

Trump, White House Race to Stem Epstein Conspiracy Fallout

US Attorney Beckwith Dismissed by Trump Admin, Replaced With Sanchez

7 hours ago

Trump Says He Would Love for Fed Chair Powell to Resign

7 hours ago

Trump Says Coca-Cola Agreed to Use Real Cane Sugar in US

7 hours ago

7.3 Magnitude Earthquake Strikes Off Alaska Coast. No Danger to California

8 hours ago

US Renewable Power Transmission Project Under Fire From Farmers

8 hours ago

Fresno Detectives Nab Murder Suspect With Help From Riverside Sheriff’s Deputies

9 hours ago

Bains Is Challenging Valadao. An Early Look at Fundraising.

11 hours ago

Trump, White House Race to Stem Epstein Conspiracy Fallout

11 hours ago

Wired Wednesday: Judge Gives Green Light to 4-Story NW Fresno Apt. Complex

11 hours ago

Federal Immigration Crackdown Threatens California’s Historic Housing Reforms

12 hours ago

Trump Says He Is Ending Government Funding California’s High-Speed Rail Project

WASHINGTON – President Donald Trump announced on Wednesday that he is ending government funding for California’s High-Speed Rail...

6 hours ago

A drone view of a California High-Speed Rail Bridge where it crosses through Fresno, California, U.S. June 8, 2025. (Reuters)
6 hours ago

Trump Says He Is Ending Government Funding California’s High-Speed Rail Project

6 hours ago

Bakersfield Tax Return Preparer Pleads Guilty in $25 Million Fraud Scheme

6 hours ago

Congressional Hopeful Lorenzo Rios Says No to PBS Funding. Once Led Local Station

7 hours ago

US Attorney Beckwith Dismissed by Trump Admin, Replaced With Sanchez

President Donald Trump looks on at the White House in Washington, D.C., U.S., July 16, 2025. (Reuters/Umit Bektas)
7 hours ago

Trump Says He Would Love for Fed Chair Powell to Resign

Coca-cola soda is shown on display during a preview of a new Walmart Super Center prior to its opening in Compton, California, U.S., January 10, 2017. (Reuters File)
7 hours ago

Trump Says Coca-Cola Agreed to Use Real Cane Sugar in US

8 hours ago

7.3 Magnitude Earthquake Strikes Off Alaska Coast. No Danger to California

Windmills line a hillside in Palm Springs, California, U.S., November 29, 2019. (Reuters File)
8 hours ago

US Renewable Power Transmission Project Under Fire From Farmers

Help continue the work that gets you the news that matters most.

Search

Send this to a friend