United States
USA
CDK Global attack disrupts 15,000+ U.S. and Canadian auto dealerships
Beginning 19/06/2024, CDK GLOBAL suffered a ransomware incident that led the company to disconnect core dealer management systems, causing multi‑week outages across ~15,000 North American auto dealers affecting sales, service, payroll and CRM operations. Reports and analysis linked the attack to BlackSuit ransomware; recovery progressed into early July.
85
Estimated severity
85 / 100
90
Source reliability
90 / 100
Approximate Date
19/06/2024
Targeted Company
CDK GLOBAL
Targeted Company Supply Chain Impact
Distribution & Fulfillment
Procurement & Sourcing
Production & Manufacturing
Sales (Retail & Ecommerce)
Warehousing
Service Delivery
Unrecognized Impact
Supply Chain Relations
ASBURY AUTOMOTIVE (Digital platform provider)GROUP 1 AUTOMOTIVE (Digital platform provider)LITHIA MOTORS (Digital platform provider)SONIC AUTOMOTIVE (Digital platform provider)
Geographic Impact
Country Targeted Company
Other Affected Countries
Canada
CAN
Target country
United States
Affected countries
United StatesCanada
Impacted regions
North America · United StatesNorth America · Canada
Operational Impact
Duration
15 days
Financial impact (USD M)
No information
Impact types
Service unavailabilityDownstream customer disruptionOrder processing disruption
Affected sectors
Technology & IT ServicesRetail
Affected departments
Information Technology
Attack Profile
Attack types
Ransomware
Attributed threat actors
BLACKSUIT
Sources
Incident Sources
therecord.mediahttps://therecord.media/cdk-global-ransomware-incident-restoring-servicescloudskope.comhttps://www.cloudskope.com/breaches/cdk-global-breach-2024fairtprm.comhttps://www.fairtprm.com/articles/cdk-global-ransomware-dealership-outage.htmlpsmpartners.comhttps://www.psmpartners.com/blog/cdk-cyber-attack-on-auto-dealershipsextrahop.comhttps://www.extrahop.com/blog/CDK-Global-Ransomware-Attack-Sends-Shockwaves