CDK Global

cdkglobal.com

CONFIRMED

Dealership software giant CDK Global suffered an operational paralysis cyberattack by the BlackSuit ransomware group, shutting down 15,000 auto dealerships nationwide.

Observable Status CONFIRMED

Industry / Sector Automotive & Software Services

Incident Classification Ransomware Extortion & Software Outage

Attributed Threat Actor BlackSuit

Affected Population 15,000,000 records

First Seen 2024-06-19

Last Updated 2024-07-02

Compromised Data Classes:

Dealership Management Systems Car Buyer Purchase Records Financing Applications & Customer PII Customer Records

Statutory Regulatory Filings:

State AG: Breach Notification (CA DOJ) (CA-DOJ-2024-CDK)

OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

88% CONFIDENCE

1. Primary Authority CONFIRMED BY TARGET Base weight: 50%

2. Evidence Specificity +23% Statutory Filing Verified

3. Corroboration Curve +12% 2 independent domains

4. Timeline & Staleness +3% 3 milestones logged

Corroborated Source Domains:

cdkglobal.com bleepingcomputer.com

STATUTORY REGULATORY DISCLOSURES

Official Regulatory Filings & Legal Compliance Records

1 Verified Statutory Filing

Regulatory Ground Truth Standard: The disclosures below represent formal statutory filings and enforcement records submitted to government regulatory authorities (SEC, State Attorneys General, HHS OCR, CISA). In accordance with repository principles, this data is captured exactly as filed by the reporting entity and is never modified, overridden, or synthesized by AI models.

State AG

Breach Notification (CA DOJ)

CONFIRMED BY REGULATOR

Docket / Accession ID CA-DOJ-2024-CDK

Statutory Filing Date 2024-06-19

Disclosed Impact 15,000,000 records

Evidence Standard Regulatory Ground Truth

Statutory Filing Details & Summary (Preserved As Filed):

Official statutory regulatory filing submitted by CDK Global to State AG pursuant to applicable data breach disclosure mandates.

View Official Regulatory Filing Document https://oag.ca.gov/privacy/databreach/list

Technical Forensic Briefing

Incident Overview

Dealership software giant CDK Global suffered an operational paralysis cyberattack by the BlackSuit ransomware group, shutting down 15,000 auto dealerships nationwide.

Compromised Assets & Data Scope

Primary Data Classes: Dealership Management Systems, Car Buyer Purchase Records, Financing Applications & Customer PII.
Disclosed Affected Population: Approximately 15,000,000 individuals or records.

Statutory Disclosures & Compliance

Statutory filing submitted to State AG (Breach Notification (CA DOJ)) under accession CA-DOJ-2024-CDK.

Milestone Timeline (3 events logged)

2024-06-19 14:00 UTC

CONFIRMED BY TARGET

CDK Global shuts down all core dealership management systems following massive cyberattack disrupting 15,000 car dealerships nationwide.

Source: CDK Global Customer Advisory Bulletin

2024-06-21 16:30 UTC

INDEPENDENT VERIFICATION

BlackSuit ransomware collective demands $25M ransom; second intrusion detected during restoration attempt.

Source: BleepingComputer Cybersecurity Investigation

2024-07-02 18:00 UTC

CONFIRMED BY TARGET

CDK confirms phased restoration of dealer management system (DMS) for core dealership clients nationwide.

Source: CDK Global Restoration Announcement

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub