US car dealerships face ongoing outage after CDK cyberattacks | TechCrunch

Auto retailers and car dealerships across the U.S. are facing another day of outages after a second cyberattack hit tech company CDK Global, which develops software used for managing auto customers and their vehicles.

In a message from CDK sent to customers Thursday, the company said the additional cyberattack late Wednesday may result in extended outages.

“At this time, we do not have an estimated time frame for resolution and therefore our dealers’ systems will not be available at a minimum on Thursday,” the message read. 

CDK said that its customer support teams “remain unavailable” as a precautionary measure to maintain security. 

When reached by TechCrunch, CDK spokesperson Lisa Finney confirmed the second incident and another shutdown of “most of our systems.”

“In partnership with third party experts, we are assessing the impact and providing regular updates to our customers. We remain vigilant in our efforts to reinstate our services and get our dealers back to business as usual as quickly as possible,” said Finney.

The company’s website says its software runs in about 15,000 dealerships.

News of the cyberattack broke early Wednesday as car dealerships reported outages with their CDK-run dealer management systems, which allow dealers to handle customer appointments, vehicle records, and other information Several CDK customers took to social media and Reddit saying the outages forced staff to find workarounds that do not rely on the downed software. 

CDK did not describe the nature of the initial cyberattack, but said that CDK shut all of its systems down on Wednesday. Some CDK functions began to return on Wednesday afternoon, according to Bloomberg, which first reported the ongoing cyberattack. It’s not clear if, or how, the second cyberattack is related to the first. 

CDK did not answer TechCruch’s specific questions about the incidents, including if it’s aware of any exfiltration of data from its systems. It’s not yet clear if the company has the ability to determine what customer data, if any, was stolen.

Updated on June 20 at 1pm ET with CDX’s latest statement.

Do you know more about the CDK cyberattacks? Get in touch. To contact this reporter, get in touch on Signal and WhatsApp at +1 646-755-8849, or by email. You can also send files and documents via SecureDrop.