Group claiming CDK systems hack demands millions of dollars, Bloomberg News reports
Updates June 21 report to add CDK statement in paragraphs 4 to 6
June 21 (Reuters) -A group of hackers claiming responsibility for a cyberattack on CDK's software systems has demanded millions of dollars in ransom to put an end to the hack, which affected auto dealers across the United States, Bloomberg News reported on Friday.
The group behind the attack is believed to be based in eastern Europe, according to the report, which cited people familiar with the matter.
The auto retail technology and software provider planned to pay the ransom, Bloomberg News reported.
CDK has said it experienced a cyber incident on Wednesday.
Although it did not directly comment on the Bloomberg report, the company in an emailed statement on Saturday said it launched an investigation by experts, notified law enforcement and has begun the restoration process. CDK said restoration will take several days.
"...In the interim we are continuing to actively engage with our customers and provide them with alternate ways to conduct business," CDK said in the statement.
U.S. auto retailers Sonic Automotive SAH.N and Penske Automotive PAG.N flagged a hit to their operations on Friday, as CDK experienced a third consecutive day of outage.
In an emailed statement, Ford said that there was an industrywide system outage for dealers who use CDK.
"However, many Ford and Lincoln customers are able to receive sales and service support due to alternative processes available to our dealers," Ford said.
Sonic said its dealerships were open and it was working to minimize the disruption. The company said it was unable to determine if the outage would affect its financial condition, but that it did have a "negative impact" on its operations.
Penske said its Premier Truck Group business, which sells new and used commercial trucks, also uses CDK's disrupted dealer management system.
"Premier Truck Group has implemented its business continuity response plans and continues to operate at all locations through manual or alternate processes," Penske said.
The commercial truck dealership business has lower unit volumes than Penske's automotive dealership business, which does not rely on CDK's software.
Separately, Kia America told Reuters it was working with affected dealers to reduce the impact of the outage and continue towards "business as usual".
CDK on its website says it works with more than 15,000 retail locations across North America.
Reporting by Nathan Gomes and Kanjyik Ghoshin Bengaluru, additional reporting by Juveria Tabassum and Harshita Meenaktshi; Editing by Alan Barona, Pooja Desai and Cynthia Osterman
Latest News
Disclaimer: The XM Group entities provide execution-only service and access to our Online Trading Facility, permitting a person to view and/or use the content available on or via the website, is not intended to change or expand on this, nor does it change or expand on this. Such access and use are always subject to: (i) Terms and Conditions; (ii) Risk Warnings; and (iii) Full Disclaimer. Such content is therefore provided as no more than general information. Particularly, please be aware that the contents of our Online Trading Facility are neither a solicitation, nor an offer to enter any transactions on the financial markets. Trading on any financial market involves a significant level of risk to your capital.
All material published on our Online Trading Facility is intended for educational/informational purposes only, and does not contain – nor should it be considered as containing – financial, investment tax or trading advice and recommendations; or a record of our trading prices; or an offer of, or solicitation for, a transaction in any financial instruments; or unsolicited financial promotions to you.
Any third-party content, as well as content prepared by XM, such as: opinions, news, research, analyses, prices and other information or links to third-party sites contained on this website are provided on an “as-is” basis, as general market commentary, and do not constitute investment advice. To the extent that any content is construed as investment research, you must note and accept that the content was not intended to and has not been prepared in accordance with legal requirements designed to promote the independence of investment research and as such, it would be considered as marketing communication under the relevant laws and regulations. Please ensure that you have read and understood our Notification on Non-Independent Investment. Research and Risk Warning concerning the foregoing information, which can be accessed here.
