Official statement from CDK Global or verified news reports

CDK Global Begins System Restoration After BlackSuit Ransomware Attack Hits 15,000 Locations

Jun 24, 2024, 10:34 AM

CDK Global, a leading provider of software for car dealerships, is in the process of restoring its systems after a significant cyberattack attributed to the BlackSuit ransomware group. The attack, which occurred on June 19, caused widespread disruptions across thousands of car dealerships in North America, affecting over 15,000 retail locations. CDK Global's software systems were largely unavailable, impacting business operations for several days. The company has begun negotiations with the hackers, with ransom demands purportedly in the tens of millions of dollars. AutoNation and Group 1 Automotive are among the major auto dealers affected, though they continue to conduct business. CDK Global has communicated that it expects the restoration process to take several more days. At least four publicly traded auto dealers have warned the SEC of possible financial impacts. Allan Liska, a threat analyst at Recorded Future, confirmed BlackSuit's involvement. The incident has prompted dealerships to adopt various best practices to mitigate the impact of the outage.