\n
![](\"https:\/\/fortune.com\/img-assets\/wp-content\/uploads\/2024\/06\/GettyImages-1418734387-e1718924355507.jpg?w=2048\")
<\/p>\n [ad_1]
\n<\/p>\n
Auto retailers across the U.S. are likely to be out of service for days following a second major cyberattack at CDK Global<\/a>, the software provider that thousands of dealers rely on to run their stores.\u00a0<\/p>\n \u201cAt this time, we do not have an estimated time frame for resolution and therefore our dealers\u2019 systems will not be available likely for several days,\u201d the company said in a communication sent to customers on Thursday that has been reviewed by Bloomberg.<\/p>\n A CDK spokesperson did not immediately respond Thursday to an email and phone message inquiring about the message it sent to customers.<\/p>\n CDK informed customers Thursday of the incident, which occurred late the prior evening. The company shut down most of its systems again, initially saying that its dealers\u2019 systems \u201cwill not be available at a minimum on Thursday.\u201d<\/p>\n On what otherwise would have been a busy U.S. holiday for business, dealers reliant on CDK were unable to use its systems to complete transactions, access customer records, schedule appointments or handle car-repair orders. The company serves\u00a0almost 15,000 dealerships<\/a>, supporting front-office salespeople, back-office support staff and parts-and-service shops.<\/p>\n The outage also extended to hundreds of dealerships in Canada, with retailers relying on pen and paper to work on deals, said Tim Reuss, president of the Canadian Automobile Dealers Association. Those transactions will eventually need to be logged digitally once the systems are back online, he said.<\/p>\n \u201cThere\u2019s going to be a bit of a hangover from this incident,\u201d he said.<\/p>\n AutoNation<\/a> Inc. led shares of publicly listed dealership groups lower Thursday, falling as much as 4.6% in intraday trading. Lithia Motors<\/a> Inc., Group 1 Automotive<\/a> Inc. and Sonic Automotive<\/a> Inc. also slumped.<\/p>\n CDK is among a small cadre of companies that provide dealership management systems to auto retailers, along with Reynolds & Reynolds Co. and Dealertrack, a unit of Cox Automotive.\u00a0<\/p>\n Dealerships reported varying degrees of impact on Thursday, with some saying in social media posts that they were unaffected by the hack. Others said they still experienced disruptions even though they used DMS systems from CDK\u2019s rivals.<\/p>\n Greg Thornton, the general manager of a dealership group in Frederick, Maryland, said his stores\u2019 CDK customer-relations software had been down since early Wednesday morning.<\/p>\n \u201cI can only assume that CDK is working all hands on deck to resolve this,\u201d said Thornton, whose group includes Audi and Volvo<\/a> stores. \u201cWe\u2019ve had no conversations with them in person or over the phone.\u201d<\/p>\n Open Road Auto Group\u2019s 19 dealerships in New York and New Jersey utilize Reynolds & Reynolds but have been unable to deliver new vehicles since the outage began Wednesday, said Michael Morais, president of the dealer group.\u00a0<\/p>\n That\u2019s because other CDK services outside the primary DMS are also down, including one that links dealerships with state motor-vehicle departments for titling and registration, he said.<\/p>\n \u201cWe\u2019re frustrated with CDK because they should have better precautions,\u201d Morais said.<\/p>\n Sam Pack\u2019s Five Star Chevrolet outside Dallas sold four vehicles on Wednesday despite the initial outage, but has had to adapt, such as by handling some tasks on paper until service is restored, said Alan Brown, the store\u2019s general manager. While sales staff are able to submit approvals to lenders, the outage has blocked other elements of a transaction, such as obtaining titles.<\/p>\n \u201cWe\u2019re still doing business,\u201d Brown said. \u201cIt\u2019s just not our normal flow.\u201d<\/p>\n CDK hasn\u2019t yet provided a timeline for when its systems will be available again, he said.<\/p>\n The National Automobile Dealers Association said Wednesday it was actively seeking information from CDK to determine the nature and scope of the cyber incident.<\/p>\n CDK was spun off by Automatic Data Processing<\/a> Inc. in 2014, then agreed to be acquired in April 2022 by the investment company Brookfield<\/a> Business Partners in an all-cash deal valued at\u00a0$6.4 billion<\/a>.<\/p>\n<\/div>\n\n