89 questions in 8 topics

Dealership IT and Cybersecurity FAQs

Helion Technologies provides managed IT and cybersecurity exclusively for automotive and heavy-truck dealerships. Founded in 1997, it has worked with dealers for nearly 30 years and supports more than 2,000 dealerships. These answers cover its services, DMS changes, customer data, AI, email and networks.

Last updated: October 2, 2026

About Helion Technologies

Who Helion is, which dealerships it works with and how it supports them.

How long has Helion Technologies been in business?
Helion Technologies has been in business since 1997, which adds up to nearly 30 years of working exclusively with automotive and heavy-truck dealerships. All of that time has gone into dealership IT and cybersecurity: protecting dealership systems, customer data and day-to-day operations. Helion is based in Baltimore, Maryland, and the company page covers its background in more detail.
What cybersecurity and IT services does Helion Technologies provide for automotive dealerships?
Helion Technologies provides managed IT and cybersecurity services for automotive and heavy-truck dealerships, customized to each store or dealer group. The work is aimed at stronger security, less downtime and better-performing dealership technology. Helion also offers Tekion enablement, protection through DMS transitions and managed AI. The services page describes each service, and the contact page reaches a Helion representative.
What types of dealerships does Helion support?
Helion Technologies supports two kinds of dealerships: automotive dealerships and heavy-truck dealerships. It has worked exclusively with those two markets since it was founded in 1997 and now supports more than 2,000 dealerships and 35,000 end users, including dealer groups that operate multiple rooftops across multiple states. Businesses outside the dealership market are not part of Helion’s client base.
Does Helion provide nationwide dealership IT support?
Yes. Helion Technologies supports dealerships across the United States from its base in Baltimore, Maryland. It supports more than 2,000 dealerships and 35,000 end users, including dealer groups that operate rooftops in multiple states. Support comes from a combination of remote support specialists and field technicians who work with each dealership’s own staff.
What makes dealership IT different from standard business IT?
Dealership IT supports specialized software that most businesses never run, starting with the dealer management system (DMS) and the many vendor integrations around it. It also protects large amounts of customer financial data, which brings federal requirements such as the FTC Safeguards Rule. And it has little room for downtime, because sales, service and F&I all depend on the same systems being available.
Why is cybersecurity important for automotive dealerships?
Cybersecurity matters for automotive dealerships because they hold large amounts of sensitive customer data, including financial records, credit applications and personally identifiable information (PII). That makes dealerships frequent targets for ransomware, phishing and other cyberattacks. Specialized cybersecurity helps protect that data and reduce business risk. Helion Technologies provides it alongside managed IT, as its dealership cybersecurity page describes.
Can Helion support multi-rooftop dealership groups?
Yes. Helion Technologies supports many large dealership groups that operate multiple rooftops across multiple states. For those groups, Helion provides centralized cybersecurity and IT management with support that scales as stores are added. Having one team look after every location makes it easier to keep systems, security settings and user access consistent from rooftop to rooftop.
Does Helion work with dealership vendor partners?
Yes. Helion Technologies works directly with each dealership and, when needed, with the dealership’s approved vendors and third-party partners. That includes helping manage software integrations, access permissions, user accounts and secure connections to critical systems and data. The services page describes Helion’s managed IT and cybersecurity in more detail.
What dealer management systems (DMS) or other software platforms does Helion support?
Helion Technologies supports many leading dealer management systems (DMS) and dealership software platforms, including CDK Global, Reynolds and Reynolds, and Tekion. For dealerships on Tekion, Helion offers Tekion enablement. Choosing between CDK and Tekion? Our Tekion vs CDK comparison covers the IT side, and our DMS comparison adds Reynolds and Dealertrack. Moving from Reynolds? Our Tekion vs Reynolds and Reynolds comparison covers it. When a dealership changes DMS, Helion monitors and defends it through the switch while the dealership’s own IT team handles the data migration, as the DMS transitions page explains.
Can Helion manage both on-site and remote dealership employees?
Yes. Helion Technologies supports both on-site and remote dealership employees through a combination of remote support specialists and field technicians. Helion can manage user access, devices, cybersecurity and IT support for a dealership’s workforce wherever people work, whether that is the showroom, the service drive or a home office. The managed IT page has more.
What industries besides automotive does Helion support?
Beyond automotive, the only other industry Helion Technologies supports is heavy-truck dealerships, also called commercial truck dealers. Helion has focused exclusively on automotive and heavy-truck dealerships for nearly 30 years, since its founding in 1997, so its managed IT and cybersecurity work centers on dealership systems such as the DMS.

Managed IT for Dealerships

How managed IT works for a dealership, what it should include and what it can save.

What are managed IT services for automotive dealerships?
Managed IT services for automotive dealerships provide ongoing support, monitoring, maintenance and cybersecurity for dealership technology. Helion Technologies offers managed IT and cybersecurity at three coverage levels, covering everything from user accounts and password resets to network security and infrastructure support. A Helion representative can help compare the levels; the contact page is the place to start.
How can managed IT reduce dealership downtime?
Managed IT reduces dealership downtime by monitoring systems proactively, spotting issues early and fixing problems before they interrupt the sales floor or the service drive. Helion Technologies continuously monitors networks, devices and security threats, which helps keep dealership systems running so employees can stay focused on serving customers and selling vehicles. The managed IT page has more.
What should dealerships expect from a managed IT provider?
Dealerships should expect a managed IT provider to deliver proactive monitoring, fast issue resolution, cybersecurity protection, system maintenance and strategic technology guidance. The result should be reliable support that keeps downtime low, protects sensitive data and keeps critical systems running. Helion Technologies offers three coverage levels that cover these areas, described in the coverage levels section of the services page.
Should dealerships outsource IT support?
Many dealerships benefit from outsourced IT support even when they already have in-house IT staff. Outsourced specialists can add advanced cybersecurity monitoring and extra technical resources. Many dealerships keep their in-house IT staff for on-site and hardware work and add Helion Technologies for depth. Our in-house vs managed vs co-managed IT comparison lays out all three models. A dealership weighing that option can request a price quote from Helion.
How quickly should dealership IT issues be resolved?
Dealership IT issues should be addressed as quickly as possible, especially security threats, system outages and problems with critical business software such as the DMS. A fast response limits downtime and disruption and can stop threats such as ransomware or unauthorized access before they spread. Helion Technologies provides managed IT and cybersecurity for dealerships, and the services page describes both.
What is included in dealership help desk support?
Dealership help desk support typically covers password resets, user account management, software troubleshooting, hardware support, access issues, printer and workstation help, and basic network troubleshooting. Helion Technologies offers its managed services at three coverage levels, so a dealership or dealer group can choose its level of support. The coverage levels section of the services page describes all three.
How often should dealership servers and workstations be updated?
Dealership servers, workstations and software should be updated as soon as security patches and critical updates are available. Regular updates close vulnerabilities and improve performance. Before a major update, systems should be tested for compatibility and backed up to reduce operational risk. This patching and maintenance work is available within Helion Technologies’ coverage levels.
Can managed IT services reduce dealership operating costs?
Yes. Managed IT services can often reduce dealership operating costs by cutting downtime, improving efficiency, preventing costly cyber incidents and reducing the need for a large in-house IT team. That matters most for dealer groups running multiple rooftops. A dealership that wants figures for its own stores can request a price quote from Helion Technologies.
How does proactive IT monitoring work?
Proactive IT monitoring continuously tracks the health, performance and security of a dealership’s systems so problems are caught early. Helion Technologies monitors networks, devices, servers and security alerts 24/7 to identify issues before they become outages and to respond quickly to potential threats. The managed IT page describes the service.
What happens if a dealership loses internet access?
When a dealership loses internet access, DMS access, customer communications, payment processing and online lead management can all stop. IT support teams work to find the cause, coordinate with the internet provider and restore connectivity as soon as possible. Even when Helion Technologies is off-site, its team works with the dealership’s on-site staff to diagnose and troubleshoot the source of the outage.

Cybersecurity for Dealerships

The threats dealerships face and the protections that reduce the risk.

What cybersecurity threats target automotive dealerships specifically?
Automotive dealerships attract cybercriminals because they store contact details, financial records, credit applications and other personally identifiable information (PII). The most common threats are phishing, ransomware, social engineering, credential theft and breaches that start at a vendor. Many attacks begin with a deceptive email or message that tricks an employee into granting access. Helion Technologies’ dealership cybersecurity page describes its managed cybersecurity service.
Why are dealerships frequent ransomware targets?
Dealerships are attractive ransomware targets because downtime hits sales, service, financing and customer trust at once. Cybercriminals know dealerships depend on constant system access, which makes them more likely to pay a ransom to get running again quickly. Strong cybersecurity lowers ransomware risk and improves recovery readiness. Helion’s post on the signs of an impending ransomware attack explains what to watch for.
How can dealerships protect customer financial data?
Dealerships protect customer financial data by applying security patches promptly, encrypting sensitive records, limiting access to the people who need it and training employees to recognize phishing and suspicious activity. Written cybersecurity policies tie those steps together and reduce the risk of a breach or unauthorized access. Helion Technologies provides managed cybersecurity that helps dealerships put these protections in place.
What cybersecurity protections should every dealership have?
Every dealership should layer its defenses. The basics are a firewall, spam filtering for email, multi-factor authentication (MFA), endpoint protection and around-the-clock threat monitoring, backed by regular security audits, secure backups and a written incident response plan. No single control stops every attack, so each layer covers gaps the others leave. Helion Technologies recommends this layered approach for every dealership, from a single store to a large dealer group.
Does Helion provide 24/7 cybersecurity monitoring?
Yes. Helion Technologies provides 24/7 cybersecurity monitoring, threat detection and incident response for dealerships. The aim is to help identify and address threats before they cause serious disruption or data loss, at any hour of the day or night. Helion’s dealership cybersecurity page describes the rest of its managed cybersecurity services.
What is endpoint detection and response (EDR), and why does it matter?
Endpoint detection and response (EDR) is security software that watches devices such as laptops, desktops, tablets and phones for suspicious activity. EDR helps detect threats, contain attacks and stop a compromised device from spreading malware across the network. Many dealerships lack properly configured EDR or don’t realize their protection has gaps, a problem Helion covers in its post on the dealership EDR issue.
How does multi-factor authentication (MFA) improve dealership security?
Multi-factor authentication (MFA) improves security by requiring two or more proofs of identity, such as a password plus a code sent to a phone. Even if a password is stolen, MFA makes unauthorized access much harder, which helps protect dealership systems and customer data. Helion Technologies recommends MFA across dealership accounts, and its post on the right way to do MFA explains how.
What should dealerships do after a phishing attack?
After a phishing attack, a dealership should first isolate the affected accounts or devices and reset any compromised credentials. Next comes working out what data may have been exposed and, where necessary, telling the employees, customers or partners affected. Once the attack is contained, the dealership should review the security gaps it revealed and strengthen employee training. Helion’s article on the anatomy of a phishing attack shows how these attacks unfold.
How often should dealerships perform cybersecurity audits?
Dealerships should perform a cybersecurity audit at least once a year, and more often when they add new software, migrate systems, go through a merger or acquisition, or respond to a major security change. Regular audits find vulnerabilities and strengthen the dealership’s overall security posture. Helion’s post on performing a cyber risk assessment walks through the steps.
Can cybersecurity insurance requirements affect dealership IT?
Yes. Cyber insurance requirements can shape a dealership’s IT policies and infrastructure. Many insurers require multi-factor authentication, endpoint protection, employee training, secure backups and incident response planning before they approve or renew coverage. Helion Technologies has written about getting more favorable cyber insurance terms and about why cyber insurance calls for MFA.

DMS, Software and Vendors

Dealer management systems, DMS transitions, software integrations and vendor access.

What is a dealer management system (DMS)?
A dealer management system (DMS) is the software platform a dealership runs its core business on. Like a CRM, it stores customer, sales, invoice and transaction data, and it also manages inventory, parts, service history and financing. Widely used platforms include CDK Global, Reynolds and Reynolds, and Tekion. Helion Technologies supports these platforms and offers Tekion enablement for dealerships on Tekion.
Why is DMS security important?
DMS security matters because the dealer management system holds some of a dealership’s most sensitive data: customer records, financial information, contracts and service history. Strong DMS security helps prevent data breaches and protects both customer trust and the dealership’s reputation. Helion’s post on DMS cybersecurity covers the risks to the DMS in more depth.
What happens during a DMS migration?
A DMS migration is a large, time-consuming project that also opens security gaps. New vendors come on board, money moves between accounts, new user accounts are created and old ones may keep access to legacy records and platforms. Cybercriminals watch for signs of a switch and use the distraction for phishing and social engineering aimed at busy staff. Helion’s post on cybersecurity issues when migrating to a new DMS explains more.
How can dealerships prepare for a DMS transition?
Dealerships prepare for a DMS transition by creating backups, auditing user permissions, documenting integrations, training employees and setting a clear migration timeline. Good communication between departments, vendors and IT teams lowers risk and limits disruption. Helion Technologies monitors and defends dealerships through the switch, working alongside the dealership’s own IT team, as the DMS transitions page explains.
What are the biggest IT risks during a DMS switch?
The biggest IT risks during a DMS switch include phishing, misconfigured integrations, vendors with more access than they should have, incomplete backups, stolen credentials and accidental data loss. Every transition opens temporary weaknesses that attackers may try to use. Helion covers these risks in two posts: cybersecurity issues to avoid when migrating to a new DMS and the cyber risk of changing DMS.
How can dealerships reduce downtime during a DMS transition?
Dealerships reduce downtime during a DMS transition by planning the migration carefully, running the cutover outside business hours, validating integrations beforehand and making sure every team understands the timeline. Some downtime may be unavoidable, but preparation can cut disruption substantially. Helion’s post on cybersecurity issues when migrating to a new DMS covers the security side of the same planning.
Who should manage cybersecurity during a DMS migration?
Cybersecurity is everyone’s job, all the time, and a DMS migration is no exception. Dealership leadership, IT teams, cybersecurity specialists and key vendors should manage it together, and every employee plays a part by following security practices, verifying unusual requests and reporting suspicious activity. Helion Technologies fills the specialist role by monitoring and defending the dealership through the switch, as the DMS transitions page describes.
How long does a dealership DMS conversion usually take?
The cutover itself can be done in a few hours or within one business day, but planning a full DMS migration often takes weeks or months. That preparation includes data validation, backups, integration testing, employee training and security reviews. Helion’s post on cybersecurity issues when migrating to a new DMS covers the security reviews in more detail.
What data should dealerships back up before changing DMS providers?
Before changing DMS providers, a dealership should back up all critical business data: customer records and contact information, contracts, sales data, accounting records, inventory data, service history and warranty documentation. Helion Technologies also recommends keeping those backups in more than one location, so a single failure or attack during the switch cannot take out every copy.
Can poor IT planning delay a DMS implementation?
Yes. Poor IT planning can delay a DMS implementation, increase downtime, create security vulnerabilities and cause data migration problems. Thorough planning makes the transition smoother and more secure, from the first data export to the final cutover. Helion’s post on cybersecurity issues when migrating to a new DMS lays out the planning steps that matter most for security.
What risks come from too many dealership software integrations?
Every software integration is another pathway into a dealership’s systems, and even one poorly secured third-party connection can expose the whole environment. Many dealerships choose integrations and vendors mainly on features and fit, while security gets less attention. Helion Technologies recommends limiting integrations to the ones the dealership truly needs and can monitor every day.
How can dealerships securely manage third-party vendors?
Dealerships manage third-party vendors securely by limiting each vendor to the access it needs, keeping integrations to the necessary ones and reviewing that access regularly. Too many loosely secured integrations create visibility gaps and can expose sensitive data if one vendor is compromised. Helion Technologies works with each dealership’s approved vendors on integrations, access permissions and user accounts.
What dealership systems should integrate with the DMS?
The right DMS integrations depend on how the dealership operates. Common ones include CRM platforms, service scheduling tools, inventory systems, accounting software, OEM tools and employee management platforms. Helion Technologies recommends limiting integrations to the systems the dealership needs, which reduces security risk and protects data integrity. Helion’s post on the cyber risk of changing DMS goes further.
Should dealership software be cloud-based or on-premise?
Many dealerships benefit from cloud-based software, which offers easier scaling, remote access, simpler maintenance and lower infrastructure costs. The right choice still depends on each dealership’s operational and security requirements. Helion Technologies sets out its recommendations in a post on why dealerships should choose Azure cloud over on-premise servers.
What are the cybersecurity risks of legacy dealership software?
Legacy dealership software often lacks modern security protections and may no longer receive patches or updates. The risks include unpatched vulnerabilities, weak authentication, compatibility problems and inactive user accounts that keep access after a migration. Helion’s post on cybersecurity issues when migrating to a new DMS covers these legacy risks.
How can dealerships safely give vendors remote access?
Dealerships should keep vendor remote access tightly controlled, monitored and limited to business-critical needs. That means using secure access methods, requiring multi-factor authentication, monitoring activity logs and reviewing permissions regularly so each vendor reaches only what it needs. Helion’s post on cybersecurity issues when migrating to a new DMS covers vendor access as one of the main risks.

Customer Data, Compliance and Risk

Protecting and keeping customer data, and how the FTC Safeguards Rule, the CCPA and PCI standards apply to dealerships.

What customer data do dealerships need to secure?
Dealerships need to secure basic contact details such as names, email addresses and phone numbers, and highly sensitive data such as Social Security numbers, bank account details, credit card information, driver’s license data and other personally identifiable information (PII). A breach of that data can lead to identity theft, fraud, financial loss and reputational damage. Helion Technologies advises dealerships to protect all of it, not only the financial records.
How should dealerships store finance and credit application records?
Dealerships should store finance and credit application records in secure, encrypted systems with strict access controls. Helion Technologies recommends limiting that data to authorized staff, backing it up regularly and covering it with strong cybersecurity policies, because credit applications carry the details identity thieves look for, from Social Security numbers to bank account information.
How long should dealerships retain customer financial data?
Retention periods for customer financial data vary by state, lender, OEM and federal regulations. In many cases dealerships keep sales and financial records for 5 to 10 years, though the exact period depends on the type of record and the laws that apply. Helion Technologies recommends reviewing those legal requirements regularly so records are kept as long as required and disposed of securely after that.
What is encrypted data storage?
Encrypted data storage converts readable data into encoded information that can only be read with the right decryption key or credentials. Encryption adds a layer of protection that makes stolen data far harder for unauthorized users to read or misuse. Helion Technologies recommends encrypting sensitive dealership records, and its post on the role of encryption keys explains why managing keys matters.
Are cloud backups secure for dealerships?
Yes. When properly configured, cloud backups are highly secure and often safer than relying only on on-premise storage. They provide redundancy, encryption and faster recovery after hardware failure, ransomware or other incidents. Helion Technologies recommends pairing cloud backups with local copies, and its post on data backup best practices covers the rest.
How can dealerships securely dispose of old hard drives?
To dispose of old hard drives securely, a dealership must make sure every piece of stored data is permanently destroyed and unrecoverable. Common methods include shredding, crushing, drilling or a certified data destruction service. Helion Technologies recommends keeping a documented chain of custody and following a recognized standard such as NIST Special Publication 800-88 for media sanitization.
Should dealerships store customer documents digitally?
Yes, in most cases. Secure digital storage is generally safer, easier to search and easier to manage than paper, provided proper security controls are in place. Paper can be lost, stolen or damaged, while digital files can be encrypted, backed up and access-controlled. Some customers still want paper copies and some states may require wet-ink signatures, so Helion Technologies suggests secure digital storage with a plan for those exceptions.
What are the risks of unsecured dealership Wi-Fi?
Unsecured Wi-Fi exposes a dealership to unauthorized access, bandwidth theft, malware and intercepted data. Attackers can use an open network to watch traffic or try to reach internal systems. Helion Technologies recommends password protection, strong encryption, network segmentation and a separate guest network, so customers in the showroom never share a network with the DMS.
Are dealerships required to follow FTC Safeguards Rule requirements?
Many dealerships must follow the Federal Trade Commission (FTC) Safeguards Rule. It applies to financial institutions under the Gramm-Leach-Bliley Act (GLBA), and that includes many dealerships that arrange financing or leases for customers. A covered dealership must run a security program that protects customer information, including risk assessments, employee training, access controls and incident response planning. The blog post on the true intent of the FTC Safeguards Rule goes further.
What is the FTC Safeguards Rule?
The FTC Safeguards Rule is a federal regulation, issued under the Gramm-Leach-Bliley Act, that requires covered businesses to develop, implement and maintain a comprehensive information security program to protect customer financial information. The rule sets requirements for risk management, data protection, employee oversight and incident response. A blog post on comprehensive information security programs describes the program the rule calls for.
How can dealerships stay compliant with data protection laws?
Dealerships stay compliant with data protection laws by running regular risk assessments, maintaining cybersecurity controls, training employees, documenting security policies and tracking new regulations. Federal rules such as the FTC Safeguards Rule apply alongside state laws such as the California Consumer Privacy Act (CCPA), so obligations should be reviewed regularly with qualified IT and cybersecurity experts. Articles on new privacy laws appear on the blog.
What problems can result from poor cybersecurity?
Poor cybersecurity can lead to data breaches, ransomware attacks, financial fraud, regulatory penalties, downtime and reputational damage. A dealership may also have to notify affected customers, report the incident to regulators and pay for remediation such as credit monitoring or identity theft protection. Helion’s post on the real cost of a cybersecurity incident looks at the damage to reputation.
What is PCI compliance for dealerships?
PCI compliance means following the Payment Card Industry Data Security Standard (PCI DSS), a set of security requirements that protect credit and debit card data while it is stored, processed and transmitted. Any dealership that accepts card payments is expected to meet PCI requirements, which help prevent fraud and payment data breaches. PCI DSS comes from the card industry rather than a government, and payment processors hold merchants to it.
Do dealerships need cybersecurity training for employees?
Yes. Cybersecurity training should be mandatory for every dealership employee who uses email, handles transactions or works in systems such as the CRM or DMS. Employee awareness is one of the most effective defenses against phishing, fraud and social engineering. Helion Technologies calls a trained workforce a human firewall, and its post on how to build a human firewall explains the idea.
How often should employees complete cybersecurity training?
Dealership employees should complete cybersecurity training at least once a year, with extra sessions whenever major new threats, policy changes or software rollouts come along. Many organizations also run phishing simulations and short refresher courses throughout the year to keep skills sharp. Helion’s post on employee cybersecurity awareness training covers what a dealership program should include.
What is a dealership incident response plan?
A dealership incident response plan is a written, step-by-step process for spotting a cybersecurity incident such as ransomware, phishing or a data breach, then containing it, responding and recovering. Security experts advise every business to assume it will be attacked, and a strong plan reduces downtime, limits damage and speeds recovery. Helion’s post on the value of an incident response plan explains what one does for a dealership.

Artificial Intelligence (AI)

How dealerships use AI, and the data risks that come with it.

How is AI being used in automotive dealerships?
Automotive dealerships use AI to improve customer experience and efficiency. Common uses include lead qualification, vehicle recommendations, chatbot support, appointment scheduling, inventory analysis, marketing automation and customer service. AI helps dealerships respond faster, improve engagement and take repetitive tasks off their staff. Helion’s post on how dealerships are using AI looks at the trend in more detail.
Can AI improve dealership cybersecurity?
Yes. AI can improve dealership cybersecurity by spotting unusual behavior, identifying threats faster, analyzing suspicious activity and automating parts of incident response. AI-powered security tools are especially useful against phishing, malware and unauthorized access attempts. Helion’s post on how AI is giving cybersecurity tools a boost explains what these tools can do.
Can AI help detect phishing attacks?
Yes. AI can help detect phishing by analyzing email content, sender behavior, suspicious links and unusual communication patterns. Advanced AI security tools can catch threats that traditional spam filters miss, which lowers a dealership’s exposure to phishing and business email compromise. Helion Technologies covers these tools in its post on AI-powered cybersecurity tools.
Is AI safe for handling customer data?
AI can be safe for handling customer data when proper security controls are in place, but it also brings privacy risks. Before using an AI tool with sensitive information such as financial records or personally identifiable information (PII), a dealership should check how the tool stores, processes and transmits data. Helion’s post on public AI and customer PII explains the risk.
What are the cybersecurity risks of AI tools?
AI tools can introduce data leakage, prompt injection, inaccurate outputs, unauthorized data retention and accidental exposure of sensitive information. Customer, financial or proprietary dealership data entered into an unsecured AI platform could be stored, processed or exposed outside the dealership. Helion Technologies recommends removing or anonymizing sensitive data before it goes into any AI tool.
Should dealership employees use ChatGPT or other AI agents at work?
Yes, but only under clear security policies and for approved uses. AI tools can help with productivity, research and communication, yet employees should never enter customer data, financial records, passwords or proprietary dealership information into a public AI platform unless IT has approved and secured that tool. Helion’s post on how AI tools create new attack vectors explains why.

Email and Communications

Phishing, business email compromise, passwords and sharing sensitive documents.

Why are dealership email accounts targeted by hackers?
Hackers target dealership email accounts because they hold customer data, financial information, invoices and internal conversations. A compromised mailbox becomes a launch point for phishing, fraud, ransomware and business email compromise. Strong email security, spam filtering, employee training and multi-factor authentication reduce the risk. Helion Technologies recommends building them into a comprehensive information security program.
What is phishing?
Phishing is a scam that uses fraudulent emails, text messages or websites to trick people into clicking malicious links or giving up sensitive information such as passwords, banking details or credit card numbers. It remains one of the most common ways cybercriminals get into dealership systems. Helion’s post on phishing versus pharming explains how the two scams differ.
How can dealerships identify phishing emails?
Dealership employees can spot phishing emails by watching for unfamiliar senders, unexpected attachments, urgent language, spelling errors, unusual payment requests and links that don’t match the real domain. Any sensitive request, especially one involving a wire transfer, login credentials or financial data, should be verified before anyone acts on it. Helion’s post on quishing covers a newer version that hides the link in a QR code.
Should dealerships use Microsoft 365 or Google Workspace?
Microsoft 365 and Google Workspace both offer strong productivity and security features, and the right choice depends on the dealership. Many dealerships prefer Microsoft 365 for its integration with Windows, Outlook, Teams and OneDrive. On either platform, MFA, email filtering and access management remain essential. Helion Technologies also offers a complimentary Microsoft 365 Breach Assessment to check whether a dealership’s environment has been compromised.
How often should dealership employees change passwords?
Dealership employees should use strong, unique passwords and change one immediately if a compromise is suspected. Current best practice favors strong password policies, multi-factor authentication and monitoring for compromised credentials over forced password changes on a fixed calendar. Helion’s post on credential stuffing explains how attackers try stolen passwords on other accounts.
Are password managers safe for dealerships?
Yes. A trusted password manager with strong encryption is generally a secure way for dealership staff to keep track of passwords for many systems. It encourages stronger, unique passwords and cuts down on reuse. Helion Technologies recommends choosing a reputable product and turning on multi-factor authentication for it. Helion’s post on keeping remote work secure touches on password managers too.
What is business email compromise (BEC)?
Business email compromise (BEC) is an attack in which criminals break into or impersonate a trusted email account to trick employees into sending money, sharing sensitive data or approving fraudulent transactions. BEC is one of the most financially damaging threats dealerships face because the messages often look entirely legitimate. Helion Technologies recommends email filtering, multi-factor authentication and staff training as the core defenses.
How should dealerships securely share sensitive documents?
Dealerships should share sensitive documents through encrypted file-sharing platforms that offer access controls, expiring links and activity tracking. For financial or customer documents, a cloud platform such as Microsoft OneDrive, or a secure client portal, is usually safer than an email attachment. Helion’s post on a secure way for dealerships to receive customer files describes one approach.
Is it safe to email customer financial information?
Generally, no. Email should not be treated as a secure way to send customer financial information, and dealerships should use encrypted document-sharing platforms whenever possible. If email has to be used, attachments should be encrypted and password-protected and sent only to verified recipients. Helion Technologies recommends an encrypted document-sharing platform as the default for this kind of information.

Network and Infrastructure

Network equipment, Wi-Fi, backups, uptime and running IT across multiple rooftops.

How often should dealerships replace networking equipment?
Most commercial-grade networking equipment should be evaluated for replacement every 3 to 5 years, depending on the dealership’s size, workload and infrastructure. Wireless hardware may age faster as Wi-Fi standards change. Servers, storage and other core infrastructure often stay viable for 5 to 7 years, though rising performance demands can force earlier upgrades. Helion Technologies recommends reviewing network equipment on that 3-to-5-year cycle.
What causes slow dealership internet speeds?
Slow dealership internet can come from internet provider problems, outdated network hardware, heavy bandwidth use, Wi-Fi interference or a problem with a single device. Helion Technologies suggests testing speeds on several devices, inspecting the networking equipment, checking for congestion and confirming that routers, switches and access points are working properly and fully updated.
Should dealerships use separate guest Wi-Fi networks?
Yes. Dealerships should always keep guest Wi-Fi separate from internal business networks, so customers, visitors and unknown devices cannot reach systems that hold company or customer data. Guest network isolation is a basic but critical security practice. Helion Technologies also recommends password protecting the guest network rather than leaving it open to anyone in range.
What is network segmentation?
Network segmentation splits one network into smaller, isolated parts, which improves security, performance and manageability. If an attacker gets into one segment, segmentation helps keep the threat there, limits unauthorized access and shields sensitive systems such as the DMS, financial platforms and employee devices. Helion Technologies recommends it for every dealership network, starting with keeping guest Wi-Fi apart from the systems staff use.
How can dealerships improve service department connectivity?
Dealerships can improve service department connectivity by keeping network hardware up to date, improving Wi-Fi coverage, eliminating dead zones and monitoring device performance. For service departments with large physical footprints, Helion Technologies suggests looking at additional access points, mesh networking or dedicated wireless infrastructure, so technicians stay connected across every bay.
What backup systems should dealerships have during outages?
Dealerships should keep layered backup systems: automatic cloud backups such as Microsoft OneDrive, local backups, redundant storage and battery backup for critical equipment. That redundancy keeps important files, applications and operational data available through outages, cyberattacks and hardware failures. Helion’s post on what dealerships need to know about cyber recovery covers getting back up afterward.
Why is uptime important for dealerships?
Uptime matters because dealership operations depend on internet connectivity and system availability. Website outages, DMS downtime, CRM problems and communication failures hurt lead response times, customer experience, service appointments and sales. Even short outages can cost revenue and customer trust. Helion Technologies monitors networks, devices and servers 24/7 to catch problems before they become outages.
How should dealership groups manage multiple rooftops?
Dealership groups manage multiple rooftops best by standardizing infrastructure, software, security policies and workflows across every location. Consistent hardware, operating systems, software versions and core platforms such as the CRM and DMS improve efficiency, simplify support and reduce cybersecurity risk. A complimentary IT and cybersecurity assessment from Helion Technologies is a good starting point, and growing groups can also request a price quote.
What are the IT challenges of dealership acquisitions?
Dealership acquisitions bring IT challenges such as incompatible systems, inconsistent security policies, outdated hardware, scattered user access and integration problems between locations. Bringing a new rooftop on board takes an infrastructure review, system standardization and careful migration planning. Cybercriminals also watch acquisitions for a chance to strike, as Helion’s post on cybersecurity during acquisitions explains.
How can dealership groups standardize cybersecurity policies?
Dealership groups standardize cybersecurity by first auditing every location’s hardware, software, users and access permissions. Once the gaps are known, leadership can set unified policies for patching, access control, passwords, endpoint protection, employee training and incident response. A complimentary IT and cybersecurity assessment from Helion Technologies is one place to start. Groups with in-house IT should remember that IT and cybersecurity are not the same job.
What is centralized dealership IT management?
Centralized dealership IT management runs infrastructure, support, security and technology planning from one coordinated IT function across every rooftop. It improves consistency, reduces complexity, strengthens security enforcement and simplifies troubleshooting. Many dealer groups keep their in-house IT staff for on-site hardware and desktop work and add Helion Technologies for cybersecurity. Helion’s post on outsourcing dealership IT and cybersecurity covers the business case.

Complimentary assessment

Want Answers Specific to Your Dealership?

Helion’s complimentary IT and cybersecurity assessment gives better insight into your dealership’s cybersecurity posture and information on how to strengthen its defenses. Request one and a Helion representative contacts you to schedule it.

Have a question this page doesn’t answer? Use the contact page or call (443) 541-1500.