Something doesn't look right?

CDK Global Data Breach Jun 2024

No known CVEs used

Subscribe for weekly updates

Security Incident Summary

Severity Score

High

Organization

CDK Global

Threat Actor

BlackSuit

aka

Actor Type

Ransomware Gang

Type of Breach

Ransomware Attack

News Timeline

Aug 06, 2024

Additional Report

Sonic Automotive says ransomware-linked CDK software outage cost it $30M go.theregister.com - Sonic Automotive revealed that the June ransomware attack on CDK Global resulted in a $30 million reduction in pre-tax GAAP income, with $11.6 million attributed to additional compensation paid to sta...
Show more

Jul 12, 2024

Initial Disclosure

Car dealer software slinger CDK Global said to have paid $25M ransom after cyberattack go.theregister.com - CDK Global experienced a severe ransomware attack resulting in a $25 million ransom payment in Bitcoin, impacting over 15,000 dealerships and leading to an estimated financial hit exceeding $600 milli...
Show more

Follow up

Hackers Steal Phone, SMS Records for Nearly All AT&T Customers krebsonsecurity.com - AT&T Corp. revealed that a recent data breach has compromised phone call and text message records for approximately 110 million people, almost its entire customer base. The breach involved a cloud dat...
Show more

Jul 01, 2024

Approximately 1 Billion in Losses Reported

Dealers Are Set to Lose Nearly $1 Billion Over CDK Cyberattack motor1.com - CDK Global has reported reactivation progress after the June 19 cyberattack, with full restoration of dealer connections expected by July 4. The attack, attributed to an Eastern European group that al...
Show more

Loss Report

Jun 24, 2024

Initial Report

Car dealerships face continued disruption as CDK works to restore hacked systems csoonline.com - CDK Global experienced a cyberattack on June 19th, impacting over 15,000 car dealerships across North America and leading to extensive service disruptions, including the shutdown of its dealer managem...
Show more

Jun 22, 2024

Initial Report

CDK Global outage caused by BlackSuit ransomware attack bleepingcomputer.com - CDK Global experienced a significant IT outage impacting car dealerships across North America due to a BlackSuit ransomware attack, forcing the company to shut down its systems and data centers. CDK i...
Show more

Jun 21, 2024

Post-Breach Phishing

CDK warns: threat actors are calling customers, posing as support bleepingcomputer.com - CDK Global faced a significant cyberattack on June 18th, leading to the company shutting down most of its systems, which disrupted operations for thousands of US car dealerships. In the aftermath, thr...
Show more

Post-Breach Phishing

Jun 20, 2024

Initial Report

Cyber attack hits thousands of US car dealers csoonline.com - CDK Global, a software provider for numerous US car dealerships, experienced a significant cyber incident that led to the shutdown of most of its systems, disrupting operations for thousands of dealer...
Show more

Incident Report

Thousands of Car Dealerships Stalled Out After Software Provider Cyberattack darkreading.com - A supply chain cyberattack on software provider CDK Global forced thousands of car dealerships offline starting at 2 a.m. Eastern Time on June 19, with a subsequent incident later that evening prompti...
Show more

Incident Report

Organization Details

Organization Size

9000

HQ Location

Hoffman Estates, Illinois

Industry

Technology

Security Stack used by CDK Global at time of breach (best approximation) Why?

Network Security

VPN/SASE

IDS/IPS

Endpoint Security

EDR

MDM

Identity Management

SSO / MFA

IGA

Application Security

WAF

SCA

Cloud Security

CASB

CWPP

SIEM / Threat Intel

SIEM

TIP

Not right? Contribute more accurate data

What is CDK Global?

CDK Global Inc. is an American multinational corporation specializing in providing data and technology solutions to the automotive, heavy truck, recreational, and heavy equipment industries. Founded in 1972 as the dealer services division of Automatic Data Processing (ADP), CDK Global became an inde...
Show more

Learn more about recent incidents

9 / 10

Okta Oct, 2023

No known CVEs used

Subscribe for weekly updates

Security Incident Summary

Severity Score

Insignificant

Organization

Threat Actor

Actor Type

Type of Breach

Organization Details

Organization Size

HQ Location

Industry