Current:Home > FinanceCDK Global cyberattack: See timeline of the hack, outages and when services could return -Wealthify
CDK Global cyberattack: See timeline of the hack, outages and when services could return
View
Date:2025-04-14 06:56:41
CDK Global, a major car dealership software company utilized by thousands of dealers nationwide, is picking up the pieces after a cyberattack resulted in a multi-day system shutdown.
The initial attack happened June 19, prompting the cloud-based software company to take all systems offline “out of an abundance of caution." CDK's system is used by more than 15,000 auto dealerships across North America to manage everything from vehicle acquisitions and sales to financing, insuring, repairs and maintenance.
As of Wednesday, July 3, the company is still working to get all impacted dealers back online. Complicating the initial attack were reports of a ransom from a criminal hacking group, though CDK has not publicly confirmed the existence of the multi-million dollar demand.
Here's a timeline of the events that brought thousands of dealers to their knees and forced them back to old-school paper bookkeeping.
USA TODAY has reached out to CDK Global for comment.
June 19
A cyberattack on CDK Global prompts the software company to announce a shutdown of most of its systems “out of an abundance of caution."
CDK restored some systems that afternoon, but another cyberattack later that evening prompted the company to take the systems offline once again, USA TODAY previously reported.
While the company did not respond to questions about how many dealerships were impacted, CDK’s website says the company works with more than 15,000 retail locations across North America.
June 21
Bloomberg News reports that a group claiming to be hackers based in Eastern Europe is demanding millions of dollars in ransom connected to the hack. According to Bloomberg, an insider close to the situation said CDK planned to pay the demand.
Multiple outlets later reported that the group behind the attack was identified as BlackSuit, a cybercriminal team that spun off of an older, Russian-linked hacking group called RoyalLocker, according to Reuters.
Recorded Future ransomware analyst Allan Liska made the identification, with the company also saying the group has been responsible for at least 95 breaches at organizations across the globe.
June 22
CDK starts a restoration process expected to take "several days" to complete, spokesperson Lisa Finney told USA TODAY.
June 24
CDK Global sends a message to clients saying the shutdown will continue until at least the end of the month. However, Finney said the company had successfully brought a "small initial test group" of dealers back onto the system.
"Once validation is complete, we will begin phasing in other dealers," Finney said in an emailed statement. "We are also actively working to bring live additional applications − including our Customer Relationship Management (CRM) and Service solutions − and our Customer Care channels."
June 28
CDK continues getting systems back online in a “phased approach," having successfully brought two small groups of dealers and one large dealer group live, according to a company statement.
July 1
CDK issues a statement saying it plans to restore services to all dealers by Thursday, July 4.
“We are continuing our phased approach to the restoration process and are rapidly bringing dealers live on the Dealer Management System (DMS). We anticipate all dealers' connections will be live by late Wednesday, July 3, or early morning Thursday, July 4," CDK spokesperson Lisa Finney said to USA TODAY in an emailed statement, adding that the customer service channels have been restored for those experiencing issues.
July 4
The date all dealerships using CDK are expected to be back online following the attack.
veryGood! (5)
Related
- Macy's says employee who allegedly hid $150 million in expenses had no major 'impact'
- Saving Ecosystems to Protect the Climate, and Vice Versa: a Global Deal for Nature
- How to watch a rare 5-planet alignment this weekend
- Former NFL star and CBS sports anchor Irv Cross had the brain disease CTE
- Louisiana high court temporarily removes Judge Eboni Johnson Rose from Baton Rouge bench amid probe
- 3 children among 6 found dead in shooting at Tennessee house; suspect believed to be among the dead
- A roadblock to life-saving addiction treatment is gone. Now what?
- Owner of Leaking Alaska Gas Pipeline Now Dealing With Oil Spill Nearby
- Skins Game to make return to Thanksgiving week with a modern look
- How to watch a rare 5-planet alignment this weekend
Ranking
- Who's hosting 'Saturday Night Live' tonight? Musical guest, how to watch Dec. 14 episode
- Texas Gov. Abbott signs bill banning transgender athletes from participating on college sports teams aligned with their gender identities
- Girls in Texas could get birth control at federal clinics — until a dad sued
- Red and blue states look to Medicaid to improve the health of people leaving prison
- Can Bill Belichick turn North Carolina into a winner? At 72, he's chasing one last high
- Frozen cells reveal a clue for a vaccine to block the deadly TB bug
- These 6 tips can help you skip the daylight saving time hangover
- DOJ report finds Minneapolis police use dangerous excessive force and discriminatory conduct
Recommendation
Kylie Jenner Shows Off Sweet Notes From Nieces Dream Kardashian & Chicago West
James Marsden Reacts to Renewed Debate Over The Notebook Relationships: Lon or Noah?
Trump golf course criminal investigation is officially closed, Westchester D.A. says
Texas Gov. Abbott signs bill banning transgender athletes from participating on college sports teams aligned with their gender identities
Charges: D'Vontaye Mitchell died after being held down for about 9 minutes
3 abortion bans in Texas leave doctors 'talking in code' to pregnant patients
DOJ report finds Minneapolis police use dangerous excessive force and discriminatory conduct
Texas Gov. Abbott signs bill banning transgender athletes from participating on college sports teams aligned with their gender identities