Car dealerships across the United States will likely have to deal with disruptions for several more days after software provider CDK Global detected an additional cyber incident.
CDK Global, which provides software solutions to nearly 15,000 dealers across North America, announced on June 19 that it had shut down most of its systems while investigating a cyberattack.
The company provides dealer management, retail, customer relationship management, finance and insurance, network and communication, and intelligence services.
Dealerships use CDK products to sell cars and car parts, as well as for a wide range of other operations, and the cyberattack has caused significant disruptions for many companies. While some have resorted to pen and paper, others said they were forced to halt most of their operations.
In an update shared on the afternoon of June 19, CDK said it had already started restoring systems impacted by the hack.
However, in the evening of the same day the company “experienced an additional cyber incident” and decided to again shut down most of its systems.
“In partnership with third party experts, we are assessing the impact and providing regular updates to our customers. We remain vigilant in our efforts to reinstate our services and get our dealers back to business as usual as quickly as possible,” a CDK spokesperson told SecurityWeek.
Customers have been told that systems will likely not be available for several days.
No other information has been shared, but the attack’s highly disruptive nature suggests that it could involve ransomware. No known ransomware group appears to have taken credit for the attack and the company did not confirm or deny the involvement of ransomware when contacted by SecurityWeek.
Related: Biden Administration Will Investigate National Security Risks Posed by Chinese-Made ‘Smart Cars’
Related: Thieves Use CAN Injection Hack to Steal Cars
Related: 185,000 Individuals Impacted by MOVEit Hack at Car Parts Giant AutoZone

