Car dealerships across the US and Canada are grappling with the aftermath of a suspected ransomware attack on CDK Global, a car dealership software company. Dealerships relying on CDK to manage sales, inventory, records, service, and vehicle registrations ground to a halt for almost two weeks. The outage affected 15,000 auto dealerships, potentially resulting in approximately $944 million in direct losses due to business interruptions.
The impact of the CDK Global cyber incident on auto dealerships
During the CDK incident, dealerships were unable to access critical systems, leading to significant delays and potential loss of sales to competitors unaffected by the outage. Dealerships choosing to revert to manual processes not only experienced an increased risk of data breaches, but also a decline in customer service levels. Payroll, parts, and repair operations were also impacted, compounding financial and operational complications.
With sales at a halt, workers worried as to how the dealers would make payroll. Per CNN,
An industry crippled by a seemingly minor third-party system outage
Car dealerships rely on third-party vendors for various routine functions, making them vulnerable to cyberattacks if these vendors lack robust security measures. While CDK Global did not disclose exact details, the outage could’ve been from a ransomware attack, Distributed Denial of Service (DDoS), a successful phishing campaign, or many other scenarios.
How car dealerships can strengthen their cybersecurity posture
While it’s impossible to eliminate all cybersecurity risks, there are proactive cybersecurity measures that dealerships can implement to minimize the impact of a successful attack.
- Regular backups. Ensure that all critical data is regularly backed up and that these backups are stored securely, both on-site and off-site, to allow quick restoration if systems are compromised.
- Vendor management. Ensure that third-party vendors, like CDK Global, adhere to stringent cybersecurity standards and regularly audit their security practices.
- Incident response plan. Develop and test a comprehensive incident response plan to quickly address and mitigate the impact of cyber incidents.
- Cybersecurity training. Conduct regular training sessions for all employees to recognize phishing attacks and other social engineering tactics that could lead to a breach.
- Robust security policies. Develop and enforce strong security policies, including the use of complex passwords, multi-factor authentication, and regular password changes.
- Software updates and patches. Keep all software and systems up to date with the latest security patches to protect against known vulnerabilities.
- Network security. Implement advanced network security measures such as firewalls, intrusion detection systems, and endpoint protection to monitor and defend against threats.
- Data encryption. Encrypt sensitive data both at rest and in transit to protect it from unauthorized access.
- Access controls. Limit access to sensitive information based on the principle of least privilege, ensuring that employees only have access to the data necessary for their roles.
- Regular security assessments. Conduct regular security assessments, including penetration testing and vulnerability scans, to identify and address potential weaknesses in the dealership’s IT infrastructure.
- Business continuity planning. Develop a business continuity plan that outlines alternative workflows and temporary solutions to keep operations running during disruptions.
Auto dealerships can’t be caught unprepared when the next disaster strikes. TechMD works with car dealerships across the nation to improve their cyber resilience in a cost-effective way. Take the next step to protect what matters by contacting TechMD for a complimentary cybersecurity consultation today.
Resources:
- Car dealerships hit with second day of massive computer system outage | CNN Business
- CDK Global cyberattack: See timeline of the hack, outages and when services could return
- Extended CDK outage brings chaos to car dealers | CNN Business
- CDK Global says ‘substantially all’ dealers are back online after a crippling hack