July 1, 2024 at 03:24PM
CDK Global aims to restore access to its dealer management system and other applications following a ransomware attack. The attack caused widespread outages, forcing car dealerships to resort to manual processes and prompting CDK to take down its IT systems. The attacker, BlackSuit ransomware gang, is now negotiating with CDK for a decryption solution.
Key takeaways from the meeting notes:
1. CDK Global’s dealer management system (DMS) will be back online by Thursday for all car dealerships following a massive IT outage caused by a ransomware attack on June 18th.
2. The company is also working on restoring access to other affected applications, such as Customer Relationship Management (CRM), ONE-EIGHTY, and Service solutions.
3. CDK spokesperson Lisa Finney stated that all dealer connections are anticipated to be live by late Wednesday, July 3 or early morning Thursday, July 4.
4. The widespread outage prompted CDK to shut down its IT systems and data centers, forcing car dealerships to switch to pen and paper, impacting sales, financing, inventory, service, and other functions.
5. CDK experienced a second cyberattack while trying to restore service, leading to the takedown of all IT systems and login systems to contain the breach.
6. Threat actors are posing as CDK affiliates or agents to gain unauthorized access to dealership systems.
7. The BlackSuit ransomware gang was identified as being behind the ransomware attack, and CDK was negotiating with the group to prevent data stolen during the attack from being leaked online.
8. BlackSuit is believed to be a rebrand of the Royal ransomware operation and is linked to attacks against over 350 organizations worldwide since September 2022 and over $275 million in ransom demands.
Please let me know if you need further details or if there’s anything else I can assist you with.