Free tools Windows power users keep installed
One-click scans. No signup required.
The CDK Global cyberattack disrupted dealership operations beginning June 19, 2024, forcing many affected stores to use paper forms, spreadsheets and other manual workarounds. CDK said substantially all dealer connections were restored by July 2, with the remaining connections expected back by July 3–4; later breach notices confirmed that some personal information had been accessed.
CDK’s dealer-management software supported roughly 15,000 dealerships in the United States and Canada, according to TechCrunch. The incident did not close every dealership, but it delayed some sales, deliveries, financing and service work.
What happened to CDK Global?
On June 19, 2024, CDK Global notified customers that it had suffered a cybersecurity incident and shut down most of its systems. After a second incident later that day, the company kept those systems offline as a security precaution.
CDK’s platform supported customer appointments, vehicle records, sales contracts, financing workflows, inventory, repair orders, parts, accounting, customer-relationship management and employee compensation.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Clear out junk files and repair common Windows errors3Scan for outdated or missing drivers - takes under a minute#1 Best Overall
![Norton 360 Deluxe 2027 Antivirus, 3 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41qw3FS3qLL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 3 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
On June 20, CDK said its systems would be unavailable for at least that day and that it had no estimated restoration time. Its customer-support operations were also unavailable during the security response. The result was a broad operational disruption rather than a shutdown of every dealership.
How dealerships operated during the outage
Many affected dealers reverted to paper forms, spreadsheets, email and other manual procedures. Depending on the store, staff had to:
- Write up vehicle sales and delivery documents manually.
- Track inventory outside the dealer-management system.
- Schedule service appointments by phone or spreadsheet.
- Record repair work and parts usage without the normal digital workflow.
- Re-enter transactions once systems became available.
- Use separate systems for financing, registration or payment processing where possible.
Some dealer groups remained open, but customers could face longer wait times, delayed deliveries and repeated requests for information. A dealership might be able to show a vehicle and accept a deposit while struggling to complete the contract, obtain registration documents or update its inventory records.
The effect varied. Dealers using other software, strong internal backup procedures or independent finance and service systems were not affected in exactly the same way as stores that relied heavily on CDK.
What the outage meant for car buyers
Vehicle purchases and deliveries
A buyer could agree to purchase a vehicle but still experience a delay before taking delivery. The store might need to complete financing documents, title and registration paperwork, insurance verification or internal inventory updates through manual workarounds.
If a dealer asked you to sign paper documents or provide information again, check that the final paperwork matches the original deal. Before leaving with the vehicle, review:
Rank #2
![Norton 360 Deluxe 2027 Antivirus, 5 Devices, Auto-Renews [Download]](https://m.media-amazon.com/images/I/41IYV5zGyCL._SL160_.jpg)
- ONGOING PROTECTION Download instantly & install protection for 5 PCs, Macs, iOS or Android devices in minutes!
- TOP-PERFORMING VPN Faster speeds, more server locations, and greater connection control to protect your privacy across all your devices, including Smart TVs.
- ADVANCED SCAM PROTECTION Help spot hidden scams online. With the built-in Genie AI assistant, you’ll never wonder if a message or email is suspicious again.
- REAL-TIME PROTECTION Advanced security protects against existing and emerging malware threats, including ransomware and viruses, and it won’t slow down your device performance.
- DARK WEB MONITORING Identity thieves can buy or sell your information on websites and forums. We search the dark web and notify you should your information be found.
- The vehicle identification number (VIN).
- The agreed sale price and itemized fees.
- Any trade-in allowance and payoff amount.
- The interest rate, loan term and amount financed.
- Optional products such as service contracts, warranties or add-ons.
- Down-payment and deposit credits.
- Temporary tags, registration details and promised delivery items.
Do not assume that a handwritten worksheet is the final contract. Ask for a complete copy of the retail installment contract, purchase agreement and any other documents you signed.
Financing and payments
A CDK outage did not automatically cancel an approved auto loan. However, it could slow communication among the dealer, lender and customer. That matters if an approval had an expiration date, if the loan terms changed, or if a buyer was making payments before receiving final documentation.
The Tool Desk
Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Keep records of every deposit, down payment and payment made during the disruption. Save receipts, lender emails, text messages and photographs of signed paperwork. If the dealer says your financing terms have changed, compare the new documents with the original approval and ask the lender—not only the salesperson—to explain the difference.
Service appointments and repairs
Service departments could continue operating while handling appointments and repair orders manually. Customers might see delayed appointment confirmations, slower estimates or difficulty obtaining a copy of their repair history.
For a repair during the outage, request a written estimate before authorizing work and a detailed invoice when the vehicle is returned. Keep mileage, parts, labor and warranty information. If you have a manufacturer warranty or prepaid maintenance plan, ask how the dealer is recording the visit so the service history can be entered correctly later.
Was customer data stolen?
Early reports accurately said CDK had not yet determined whether information had been taken. That is different from saying no data was accessed.
Rank #3
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
Later CDK breach notices stated that an unauthorized third party obtained files containing information related to some vendors and CDK’s corporate predecessor. A Massachusetts notice identified potentially affected information as:
- Name.
- Business or personal address.
- Business tax-identification number or Social Security number.
CDK said it had no indication of identity theft or fraud connected to the incident and offered affected individuals 24 months of single-bureau credit monitoring. The notice did not establish that every dealership customer was affected or that every type of information mentioned in lawsuits was compromised.
Claims involving driver’s-license numbers, financial-account information or employment history should be treated as allegations from lawsuits unless supported by a specific breach notice. It is inaccurate to say either that no personal information was accessed or that every dealership customer’s data was stolen. The Massachusetts breach notice describes the confirmed categories and CDK’s response.
What consumers should do if they received a breach notice
- Read the notice carefully. Confirm that it identifies CDK Global and explains which information related to you.
- Use the monitoring offer if eligible. Enroll through the instructions in the notice rather than an unsolicited link or phone call.
- Freeze your credit. A security freeze is free and prevents most new creditors from accessing your credit file. Place freezes separately with Equifax, Experian and TransUnion.
- Consider a fraud alert. An initial fraud alert can be placed with one bureau, which must notify the other two. It asks businesses to take additional steps to verify your identity.
- Review your credit reports. Check for unfamiliar accounts, hard inquiries, addresses or collection activity.
- Watch financial and tax accounts. Check bank, credit-card and tax-related accounts for suspicious activity. Do not provide passwords or one-time codes to someone claiming to be CDK.
- Report identity theft quickly. If you find fraud, contact the affected company and follow the relevant identity-theft reporting process.
A credit freeze is generally the stronger option when you are not applying for new credit. You can temporarily lift it when applying for a mortgage, auto loan, credit card or other account.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Who was blamed for the attack?
CDK described the event as a cybersecurity incident and later referred to it as a “cyber ransom event.” Security analysts and reporting linked the attack to the BlackSuit ransomware group, but CDK did not publicly confirm that attribution in the reporting cited here.
Reports that the attackers demanded millions of dollars also came from media and security sources. CDK did not publicly disclose the ransom amount in the contemporaneous statements. The careful description is that the attack was reportedly linked to BlackSuit—not that BlackSuit’s responsibility or the ransom figure was definitively established by CDK.
Rank #4
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
When was the CDK outage resolved?
CDK began restoring services in stages. On July 2, 2024, the company said “substantially all dealer connections” were live on its Dealer Management System and expected remaining dealers to be restored by late July 3 or early July 4, according to the American International Automobile Dealers Association’s report.
That timeline means the phrase “ongoing outage” is accurate only for the June 20, 2024 reporting period. It should not be used to describe CDK’s status indefinitely. The longer-lasting issue for some people was the investigation and notification process surrounding potentially accessed data.
How the incident could affect a personal budget
The outage did not create a universal fee or automatic price increase for consumers. Its financial effects were more likely to appear through delays, duplicate work or confusion around a transaction.
Before paying a deposit or signing revised paperwork, ask the dealer for a written explanation of any change. Check whether a delayed delivery affects your existing loan approval, temporary transportation costs, insurance start date or trade-in arrangements. If a vehicle was not delivered when promised, review the purchase agreement and ask what cancellation or refund rights apply; those rights depend on the contract and state law.
For service customers, keep evidence of appointments and promised completion dates. If a warranty claim or maintenance record is missing after the systems are restored, provide your invoice, work order and payment receipt to the service department and the manufacturer’s customer-care team.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What the incident reveals about dealership technology
The event showed how a single technology provider can sit underneath many separate customer experiences. A dealer may appear to be open, yet a disruption in its central system can affect the sales desk, finance office, service lane, parts counter and accounting department at the same time.
Best Value
- THREAT DETECTION – Stay one step ahead. Suspicious links, risky sites, viruses, and scams, caught automatically before they reach you.
- PERSONAL INFO PROTECTION – Keep your personal info safer. Identity monitoring watches for your exposed info and tells you what to do about it.
- SECURE CONNECTIONS – Just a few easy clicks, and we'll automatically protect your info on public Wi‑Fi, every time you connect.
- GUIDED ACTION – Know what matters and what to do next. Clear alerts and simple guidance make it easy to take action.
- MORE THAN ANTIVIRUS – Scam protection, identity monitoring, VPN, web protection, and antivirus work together to protect you, all in one place.
It also explains why a dealership can continue taking customers while processing fewer transactions. Paper forms preserve basic business activity, but they do not instantly replace integrated inventory records, lender connections, registration workflows and accounting controls. Once systems return, staff must reconcile what was written down with what is entered digitally—a process that can produce duplicate records or mistakes if customers do not keep their own documentation.
FAQ
Did the CDK cyberattack shut down every U.S. car dealership?
No. It affected dealerships that relied on CDK systems, and many stayed open using paper forms, spreadsheets or alternative software. Operations were often slower, and sales, deliveries, service and financing could be delayed.
Was the CDK outage still happening?
The main outage began on June 19, 2024. CDK said substantially all dealer connections were restored by July 2, with remaining connections expected by July 3–4. “Ongoing outage” is therefore historical wording, not an accurate description of CDK’s current status.
Was my personal information exposed in the CDK breach?
Not necessarily. Later CDK notices said an unauthorized party obtained files containing information about some individuals, including names, addresses and business tax-identification numbers or Social Security numbers. The notices did not say that every dealership customer was affected.
Should I freeze my credit because of the CDK incident?
If you received a breach notice or are concerned that your information may have been included, a credit freeze is a free protective step. Request one separately from Equifax, Experian and TransUnion. You can temporarily lift a freeze when applying for credit.
Can a dealership change my financing terms after the outage?
The outage itself does not authorize a dealer to change an agreed contract. Review every final document against your original quote or approval, and contact the lender directly if the interest rate, term, amount financed or payment has changed.
The Bottom Line
The CDK cyberattack was a major June 2024 disruption to dealership operations, but it did not close every dealer and it did not last indefinitely. CDK restored substantially all connections by early July. For consumers, the practical priorities are to keep copies of purchase and repair documents, verify any revised financing or delivery paperwork, and take credit-monitoring or freezing steps if CDK sent a breach notice. Later disclosures confirmed that some personal information was accessed, but not that every dealership customer’s data was stolen.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
