Skip to content
Longterm Wiki

CDK Global (2024)

On June 18, 2024, CDK Global — the dealer-management-system provider for ~15,000 North American auto dealerships — was attacked by BlackSuit ransomware. A second attack on June 19 disrupted recovery efforts. Most dealerships reverted to paper processes for two weeks. Anderson Economic Group estimated total dealer losses at $1.02B; CDK reportedly paid ~$25M in ransom. The incident is a benchmark for indirect cascade damage from sector-concentrated SaaS compromise.

Details

Date

June 18-19, 2024

Attribution

BlackSuit ransomware

AI involvement

none documented

Initial vector

Not publicly disclosed

Ransom paid

~$25M in bitcoin (per multiple reports)

Estimated total damages

~$1.02B in dealer losses (Anderson Economic Group); CDK direct costs separate

Notable impact

~15,000 North American auto dealerships disrupted for ~2 weeks; 7.2% decline in June US new-vehicle sales

Related Wiki Pages

Top Related Pages

Tags

cyber-incidentransomwareautomotivesaas-concentrationblacksuit