The shock of the 2024 CDK ransomware attack may be fading, but its impact is still shaping dealership cybersecurity. Frozen titles, dead sales systems, handwritten forms, and millions in lost revenue reminded everyone just how dependent dealerships are on their DMS—and how quickly operations collapse when cybercriminals find a way in. Here’s how to build … Read more
A recent Automotive News article titled “AI for good battles AI used in dealership cybercrime” (Nov. 26, 2025) highlights a stark reality for today’s auto and truck dealers: the cybersecurity threat landscape is evolving too quickly for in-house IT teams to manage alone. And few people have been sounding that alarm longer than Erik Nachbahr, … Read more
Auto and truck dealerships are facing a new wave of AI-powered cyberattacks — threats that don’t sleep, don’t take days off, and don’t wait for an IT ticket before they adapt. The rise of autonomous, AI-powered cyberattacks has changed the game. And here’s the uncomfortable truth: Most dealerships aren’t prepared for what this next wave … Read more
The Maryland Online Data Privacy Act (MODPA) became law in 2024, and it goes into effect on October 1, 2025. Even if your dealership isn’t in Maryland, this law is worth watching—because it’s part of a bigger trend: states across the country are rolling out their own rules for how businesses collect, use, and protect … Read more
In a recent Automotive News article titled “FTC publishes an FAQ for dealerships on Safeguards: Here’s what to know,” the Federal Trade Commission’s June release of a detailed FAQ is highlighted as a key resource for dealerships working to comply with the FTC Safeguards Rule. The rule—originally enacted in 2003 and updated in 2021 and … Read more
It’s been nearly a year since the devastating CDK Global cyberattack brought operations at thousands of dealerships to a halt—and yet, here we are again. Same criminal group. Same playbook. Different victim. The CDK Hackers just proved you haven’t learned a thing. In late April 2025, Branhaven Motors Inc., a Chrysler-Dodge-Jeep-Ram dealership in Branford, Connecticut, … Read more
A June 26, 2025 Automotive News article revisits the devastating CDK cyberattacks that struck in mid-2024, shutting down access to dealership management systems for over 15,000 auto retailers. The breach paralyzed operations, forced dealers to revert to pen-and-paper processes, and resulted in an estimated 50,000 lost vehicle sales. Despite the $1 billion in revenue losses … Read more
A comprehensive information security program encompasses policies, procedures, and technologies designed to protect data and systems. It ensures confidentiality, integrity, and availability through risk management, access controls, and incident response. More than just an IT initiative, it’s a business imperative that safeguards your dealership’s reputation, compliance, and bottom line. Key Components of a Comprehensive Information … Read more
The Automotive News article “Will dealerships heed the lessons learned from 2024 cyber attacks?” explores how the high-profile CDK Global data breach and cyber attacks became a wake-up call for the automotive retail industry. It highlights the growing urgency around dealership cybersecurity, emphasizing that proactive risk management—through cybersecurity monitoring, insurance, employee training, and vendor vetting—is … Read more