CDK Global took several actions following the cyberattacks, including shutting down most of its systems out of an abundance of caution, working with third-party experts to assess the overall impact, restoring some services like its core DMS and Digital Retailing solutions, and setting up interactive voice response (IVR) toll-free lines for customers to receive status updates on the incident. They also warned customers about bad actors posing as CDK affiliates to gain unauthorized system access.
The outage at car dealerships across North America was caused by back-to-back cyberattacks on CDK Global, a company that provides software for thousands of auto dealers in the U.S. and Canada. The attacks led to an outage that impacted many dealership operations, causing delays and forcing some dealers to revert to manual processes, such as writing up orders by hand.
CDK Global experienced back-to-back cyber incidents on June 21, 2024. The company shut down all of its systems as a precautionary measure, and some functions began to return on the same day1. The impact on customer data is still being assessed.