CDK Global hit by ransom event during cyberattack on software

TLDR:

• CDK Global has called the cyberattack on its software platform a “ransom event,” acknowledging that hackers are demanding a ransom to restore its systems.
• The cyberattack has left car dealerships unable to operate normally, with some resorting to manual transactions using pen and paper.

CDK Global has confirmed that the recent cyberattack on its software platform, which provides services to auto dealership clients, is being classified as a “ransom event.” The hackers responsible for the attack have demanded a ransom to restore the dealer management system (DMS) that was rendered unavailable for days. While CDK has begun restoring its systems, it anticipates that bringing major applications back online will take several days.

In addition to addressing the ransom demand, CDK has warned car dealerships to beware of phishing scams, urging vigilance to prevent unauthorized access to proprietary information. Some dealerships have reported resorting to manual processes, such as using pen and paper to record transactions, due to the disruption caused by the cyberattack.

The cybercriminals behind the attack are allegedly associated with a group called BlackSuit, reportedly demanding tens of millions of dollars in ransom. While CDK has not confirmed the specific group responsible for the attack, ransomware attacks like these have been on the rise, impacting numerous entities across various sectors. Experts suggest that banning ransom payments could be a potential deterrent to cybercriminals engaging in such attacks.

As the fallout from the cyberattack continues, affected car dealerships are grappling with operational challenges and delays, highlighting the need for robust cybersecurity measures to safeguard critical systems from such malicious attacks.