Current:Home > reviewsCDK Global cyberattack: See timeline of the hack, outages and when services could return -TrueNorth Capital Hub
CDK Global cyberattack: See timeline of the hack, outages and when services could return
View
Date:2025-04-17 10:47:54
CDK Global, a major car dealership software company utilized by thousands of dealers nationwide, is picking up the pieces after a cyberattack resulted in a multi-day system shutdown.
The initial attack happened June 19, prompting the cloud-based software company to take all systems offline “out of an abundance of caution." CDK's system is used by more than 15,000 auto dealerships across North America to manage everything from vehicle acquisitions and sales to financing, insuring, repairs and maintenance.
As of Wednesday, July 3, the company is still working to get all impacted dealers back online. Complicating the initial attack were reports of a ransom from a criminal hacking group, though CDK has not publicly confirmed the existence of the multi-million dollar demand.
Here's a timeline of the events that brought thousands of dealers to their knees and forced them back to old-school paper bookkeeping.
USA TODAY has reached out to CDK Global for comment.
June 19
A cyberattack on CDK Global prompts the software company to announce a shutdown of most of its systems “out of an abundance of caution."
CDK restored some systems that afternoon, but another cyberattack later that evening prompted the company to take the systems offline once again, USA TODAY previously reported.
While the company did not respond to questions about how many dealerships were impacted, CDK’s website says the company works with more than 15,000 retail locations across North America.
June 21
Bloomberg News reports that a group claiming to be hackers based in Eastern Europe is demanding millions of dollars in ransom connected to the hack. According to Bloomberg, an insider close to the situation said CDK planned to pay the demand.
Multiple outlets later reported that the group behind the attack was identified as BlackSuit, a cybercriminal team that spun off of an older, Russian-linked hacking group called RoyalLocker, according to Reuters.
Recorded Future ransomware analyst Allan Liska made the identification, with the company also saying the group has been responsible for at least 95 breaches at organizations across the globe.
June 22
CDK starts a restoration process expected to take "several days" to complete, spokesperson Lisa Finney told USA TODAY.
June 24
CDK Global sends a message to clients saying the shutdown will continue until at least the end of the month. However, Finney said the company had successfully brought a "small initial test group" of dealers back onto the system.
"Once validation is complete, we will begin phasing in other dealers," Finney said in an emailed statement. "We are also actively working to bring live additional applications − including our Customer Relationship Management (CRM) and Service solutions − and our Customer Care channels."
June 28
CDK continues getting systems back online in a “phased approach," having successfully brought two small groups of dealers and one large dealer group live, according to a company statement.
July 1
CDK issues a statement saying it plans to restore services to all dealers by Thursday, July 4.
“We are continuing our phased approach to the restoration process and are rapidly bringing dealers live on the Dealer Management System (DMS). We anticipate all dealers' connections will be live by late Wednesday, July 3, or early morning Thursday, July 4," CDK spokesperson Lisa Finney said to USA TODAY in an emailed statement, adding that the customer service channels have been restored for those experiencing issues.
July 4
The date all dealerships using CDK are expected to be back online following the attack.
veryGood! (576)
Related
- A Mississippi company is sentenced for mislabeling cheap seafood as premium local fish
- The music teacher who just won a Grammy says it belongs to her students
- A reporter is suing a Kansas town and various officials over a police raid on her newspaper
- East Palestine, Ohio, residents still suffering health issues a year after derailment: We are all going to be statistics
- Alex Murdaugh’s murder appeal cites biased clerk and prejudicial evidence
- Taylor Swift thinks jet tracker Jack Sweeney knows her 'All too Well,' threatens legal action
- Iran-backed group claims strike on Syria base used by U.S. as Israel-Hamas war fuels risky tit-for-tat
- Unofficial Taylor Swift merchants on Etsy, elsewhere see business boom ahead of Super Bowl
- Backstage at New York's Jingle Ball with Jimmy Fallon, 'Queer Eye' and Meghan Trainor
- Step Inside Sofía Vergara’s Modern Los Angeles Mansion
Ranking
- New Mexico governor seeks funding to recycle fracking water, expand preschool, treat mental health
- Court cases lead to new voting districts in some states. Could it affect control of Congress?
- Stage musical of Prince’s ‘Purple Rain’ finds a fitting place to make its 2025 debut — Minneapolis
- A man extradited from Scotland continues to claim he’s not the person charged in 2 Utah rape cases
- Bill Belichick's salary at North Carolina: School releases football coach's contract details
- Minnesota woman accused of trying to get twin sister to take fall for fatal Amish buggy crash
- Patrick Mahomes lauds Iowa basketball star Caitlin Clark, says she will 'dominate' WNBA
- Mother of 16-year-old who died at Mississippi poultry plant files lawsuit
Recommendation
North Carolina trustees approve Bill Belichick’s deal ahead of introductory news conference
Usher announces Past Present Future tour ahead of Super Bowl, 'Coming Home' album
3 shot dead on beaches in Acapulco, including one by gunmen who arrived — and escaped — by boat
Shawn Johnson East's Tattoo Tribute to All 3 Kids Deserves a Perfect 10
Juan Soto to be introduced by Mets at Citi Field after striking record $765 million, 15
California storms cause flooding, mudslides across the state as record rainfall hits West Coast
NASA PACE launch livestream: Watch liftoff of mission to examine Earth's oceans
A man extradited from Scotland continues to claim he’s not the person charged in 2 Utah rape cases