Cybercrime

Disruptions at Many Car Dealerships Continue as CDK Hack Worsens

Car dealership software provider CDK Global was in the process of restoring services impacted by a cyberattack when it discovered an additional hack.

Car hacking

Car dealerships across the United States will likely have to deal with disruptions for several more days after software provider CDK Global detected an additional cyber incident.

CDK Global, which provides software solutions to nearly 15,000 dealers across North America, announced on June 19 that it had shut down most of its systems while investigating a cyberattack. 

The company provides dealer management, retail, customer relationship management, finance and insurance, network and communication, and intelligence services. 

Dealerships use CDK products to sell cars and car parts, as well as for a wide range of other operations, and the cyberattack has caused significant disruptions for many companies. While some have resorted to pen and paper, others said they were forced to halt most of their operations. 

In an update shared on the afternoon of June 19, CDK said it had already started restoring systems impacted by the hack.

However, in the evening of the same day the company “experienced an additional cyber incident” and decided to again shut down most of its systems. 

Advertisement. Scroll to continue reading.

“In partnership with third party experts, we are assessing the impact and providing regular updates to our customers. We remain vigilant in our efforts to reinstate our services and get our dealers back to business as usual as quickly as possible,” a CDK spokesperson told SecurityWeek. 

Customers have been told that systems will likely not be available for several days. 

No other information has been shared, but the attack’s highly disruptive nature suggests that it could involve ransomware. No known ransomware group appears to have taken credit for the attack and the company did not confirm or deny the involvement of ransomware when contacted by SecurityWeek.

Related: Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’

Related: Thieves Use CAN Injection Hack to Steal Cars

Related: 185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone 

Related Content

Data Breaches

The Genesys Cloud, Genesys Engage, and Genesys Engage Cloud platforms were not affected.

Cybercrime

The company says it took some of its systems offline to contain a security issue within its network.

Data Breaches

Hackers compromised a third-party communication platform and sent rogue notifications to ASOS users.

ICS/OT

The hackers changed equipment settings, disabled remote access and alarms, and altered pumping cycles, officials said. 

ICS/OT

The Coast Guard confirmed evidence of malicious cyber activity on the VL Prosperity, but has not attributed the attack to Iran.

Incident Response

The company has called in CrowdStrike and others to investigate the attack that caused global network disruption.

Cybercrime

The cybersecurity incident has disrupted Boston Scientific’s ability to process and ship customer orders.

IoT Security

Kaspersky researchers have linked the malware to the BadBox botnet, which has ensnared millions of devices.

Copyright © 2026 SecurityWeek ®, a Wired Business Media Publication. All Rights Reserved.

Exit mobile version