CDK Global, a major US auto dealer software provider, has suffered a cyberattack, leading to business interruption for thousands of car dealers. According to Tony Macrito, a spokesperson for CDK Global, the company has shut down all systems, conducted extensive testing, and consulted with external third-party experts. He noted that CDK's core products, dealer management systems and digital retail solutions, have restored service, and the company is testing all other applications and will provide further updates after the restoration is complete.
According to Zhī Tōng Finance APP, during the busy holiday period, CDK Global, a major US auto dealer software provider, has suffered a cyberattack, leading to business interruption for thousands of car dealers. Brad Holton, Vice President of cybersecurity company Proton, pointed out that many auto dealers rely on CDK's system to carry out almost all normal business activities. Holton mentioned that the system first malfunctioned at around 2 a.m. Eastern Time, but CDK barely provided specific reasons that caused many dealers to close. Some dealers were therefore unable to operate normally, and some had to rely on paper records to handle routine services such as oil changes.
Brad Holton, Vice President of cybersecurity company Proton, pointed out that many auto dealers rely on CDK's system to carry out almost all normal business activities. Holton mentioned that the system first malfunctioned at around 2 a.m. Eastern Time, but CDK barely provided specific reasons that caused many dealers to close. Some dealers were therefore unable to operate normally, and some had to rely on paper records to handle routine services such as oil changes.
At a BMW dealership in Manhattan, customers were told that all new business, including appointments and car maintenance, had been forced to stop. When asked how long the business interruption might last, a customer service representative said, "I really don't know."
Claire Glassmire, a receptionist at Barbera's Autoland in Philadelphia, expressed similar concerns: "We can't access customer records, can't schedule certain appointments. We can't even print repair orders." She revealed that employees were working hard all day to solve the problem, but "we're all powerless."
Although some CDK functions have been restored as of Wednesday afternoon, other functions are still paralyzed and the restored services are not yet fully operational. Meanwhile, a spokesperson for Toyota Motor Corporation (TM.US) said that the issue has been resolved and has had almost no impact on the Japanese automaker's dealer network. Subaru Corp unsponsored adr stated that they have not received any impact reports.
Mike Stanton, President and CEO of the National Automobile Dealers Association, emphasized that dealers are extremely committed to protecting their customer information. He added that they are "seeking information from CDK to determine the nature and scope of the cyber attack so that they can respond appropriately."
It is understood that the services provided by CDK Global include online appointments, electronic signature functions, and inter-departmental messaging tools, all of which are critical components of daily dealer operations. In April 2022, investment company Brookfield Business Partners agreed to acquire CDK in an all-cash transaction valued at $6.4 billion. This cyber attack not only has an impact on the daily operations of dealers but may also pose challenges to CDK's reputation and business prospects.