Subj : Car sales across the US disrupted after major cyberattack hits de
To   : All
From : TechnologyDaily
Date : Thu Jun 20 2024 15:45:04

Car sales across the US disrupted after major cyberattack hits dealership 
provider

Date:
Thu, 20 Jun 2024 14:33:26 +0000

Description:
Car dealerships were forced to go back to pen and paper.

FULL STORY
======================================================================

CDK, a company that provides software-as-a-service for car dealerships, has 
suffered a major cyberattack forcing it to shut down most of its systems. 

As a result, the companies using CDKs services were unable to conduct most of 
their business and were pushed back to pen and paper for whatever little work 
they could do. 

According to a report on BleepingComputer , when CDK spotted the attack, it 
unplugged most of its systems to prevent it from spreading. Two servers were 
taken offline at 2am local time, and remained offline for most of the day. 
Disconnecting the VPN 

"We are actively investigating a cyber incident, the company told 
BleepingComputer . Out of an abundance of caution and concern for our 
customers, we have shut down most of our systems and are working diligently 
to get everything up and running as quickly as possible. 

CDK Global offers a comprehensive suite of software solutions and services 
designed to help car dealers manage and enhance their operations across 
various areas, including dealer management systems (DMS), digital marketing, 
business intelligence and analytics, fixed operations solutions, and 
cybersecurity. It allegedly has more than 15,000 clients and services 30,000 
dealer sites worldwide. 

Car dealerships using CDKs services have to configure an always-on VPN to the 
companys data centers, which then allows locally installed applications to 
access data stored on the servers. The company has now advised its clients to 
disconnect the VPN, to prevent the attack from spreading to third-party 
systems as well. 

While the nature of the attack has not yet been confirmed, usually when a 
company is forced to unplug its IT infrastructure its due to ransomware . 
Threat actors lock their victims out of their endpoints, steal sensitive 
data, and then demand money in exchange for the decryption key and keeping 
the data private. 

Some fifteen hours after spotting the incident, the company restored CDK 
Phones, DMS, and Digital Retail services. Unify and DMS logins were also made 
available, while for other services, restoration is still in progress. More 
from TechRadar Pro Harnessing AI to mitigate ransomware threats Here's a list 
of the best firewalls today These are the best endpoint protection tools 
right now



======================================================================
Link to news story:
https://www.techradar.com/pro/security/car-sales-across-the-us-disrupted-after
-major-cyberattack


--- Mystic BBS v1.12 A47 (Linux/64)
 * Origin: tqwNet Technology News (1337:1/100)

.