CDK Global Data Breach?
Last Updated on June 26, 2024
At A Glance
- What's Going On?
- Attorneys need to hear from people affected by the CDK Global cyberattack as they investigate whether a class action lawsuit can be filed.
- What You Can Do
- If you received a communication from your dealership or CDK about the cyberattack or are a customer of an affected dealer, fill out the form on this page to learn more about the investigation and how you can help.
- Does This Cost Anything?
- It costs nothing to get in touch or to talk to someone about your rights.
- What Can I Get?
- If filed and successful, a class action lawsuit could provide money for any harm resulting from the incident.
CDK Global: Possible Data Breach?
Lawsuit Investigation
Attorneys working with ClassAction.org are looking into whether a class action lawsuit can be filed in light of the CDK Global cyberattack.
CDK Global, which provides a software-as-a-service platform to thousands of car dealerships across the country, was hit by a massive cyberattack in June 2024, causing significant disruption within the auto industry.
The incident, which is believed to have started on the evening of June 18, prompted CDK Global to shut down its systems, leaving clients unable to operate normally. Dealerships reported difficulty ordering parts, extending financing and selling vehicles, forcing some to resort to pen and paper or send employees home. BleepingComputer.com reports that CDK Global experienced an additional breach on Wednesday, June 19 as the company attempted to restore its systems.
A June 22 memo sent to clients by CDK Global and obtained by CBS MoneyWatch calls the incident a “cyber ransom event,” and multiple sources reportedly told BleepingComputer.com that the BlackSuit ransomware gang is behind the attack.
In its memo, CDK Global reportedly cautioned car dealerships to be on the lookout for phishing attacks or scammers posing as CDK trying to obtain unauthorized system access.
The CDK cyberattack and its resulting disruption may cause dealerships to suffer significant financial losses. Indeed, multiple CDK clients, including AutoNation, Group 1 Automotive, Lithia Motors, Sonic Automotive and Penske Automotive Group, reported the incident and its potential effect on business to the Securities and Exchange Commission.
Reports indicate that some Stellantis, BMW and Ford dealerships are also affected by the CDK Global cyberattack.
Take Action
If your car dealer (or even CDK) sent you a communication about the CDK Global cyberattack or you made a purchase (e.g., car, repairs) at an affected dealer, fill out the form on this page to get in touch with us.
It's possible the invoice you received states "CDK," indicating it was made using the company's software.
An attorney or legal representative may then reach out to you to explain more about this investigation and ask you a few questions.
Remember, there is no cost to get in touch, and you are under no obligation to take action after speaking to someone.
Before commenting, please review our comment policy.
The information submitted on this page will be forwarded to Milberg Coleman Bryson Phillips Grossman, PLLC who has sponsored this investigation.
