A Year After CDK Cyberattacks, Some Dealers Haven’t Learned Their Lesson

Automotive News Article

A June 26, 2025 Automotive News article revisits the devastating CDK cyberattacks that struck in mid-2024, shutting down access to dealership management systems for over 15,000 auto retailers. The breach paralyzed operations, forced dealers to revert to pen-and-paper processes, and resulted in an estimated 50,000 lost vehicle sales. Despite the $1 billion in revenue losses … Read more

What is a Comprehensive Information Security Program?

comprehensive information security

A comprehensive information security program encompasses policies, procedures, and technologies designed to protect data and systems. It ensures confidentiality, integrity, and availability through risk management, access controls, and incident response. More than just an IT initiative, it’s a business imperative that safeguards your dealership’s reputation, compliance, and bottom line. Key Components of a Comprehensive Information … Read more

CDK Cyber attack Lessons Help Dealerships Thwart New Threat — Automotive News

Automotive News Article

A recent Automotive News opinion piece titled “In our opinion: Thwarted dealership cyber attack indicates that lessons from last year have been learned” highlights how the auto retail industry is beginning to apply critical lessons from the 2024 CDK cyber attack. In March, a new cyber threat was successfully blocked by Reynolds and Reynolds’ Proton … Read more

Initial Access Brokers: The Key to Fast-Tracking Ransomware Attacks

Initial Access Broker

Cybercriminals have found a lucrative way to streamline their attacks and maximize their gains: by using Initial Access Brokers (IABs). These brokers specialize in gaining access to networks—like yours—and then selling that access to other cybercriminals. They’re essentially the middlemen of the cybercrime world, and their customers range from ransomware groups looking to cash in … Read more

EDR Killers: The New Cyber Threat Targeting Dealerships

EDR Killer

Dealerships are under attack, and the new cyber threat targeting dealerships is something called the “EDR Killer.” This growing threat is specifically designed to bypass one of the most critical security defenses dealerships rely on—your Endpoint Detection and Response (EDR) system. If you’re relying on EDR alone to protect your dealership’s systems, data, finances, and … Read more

Cybersecurity for Car Dealerships: An Unsolved Mystery… Until Now

Unsolved mystery of dealership cybersecurity

Let’s be real. Cybercriminals aren’t the shady figures we imagine lurking in dark alleys—they’re smart, well-funded, and packing some of the best tech money can buy. And guess what? They have their eyes on one of the most unprepared industries: car dealerships. That’s why cybersecurity for car dealerships has become more critical than ever. Because … Read more

The Real Cost of a Cybersecurity Incident: How It Can Wreck an Auto Dealership’s Reputation

Damaged Reputation

The reputation of a dealership can be shattered in an instant. Cybersecurity incidents aren’t just technical problems—they’re ticking time bombs that can destroy a dealership’s hard-earned trust and goodwill with customers. Imagine your dealership’s name plastered across headlines, not for record sales, but for a data breach. Now, try to sell a car to a … Read more

Dealership Cybersecurity Measures Are Stuck In The Mud

Dealership cybersecurity stuck in the mud

Auto dealerships are targeted by cybercriminals – there is no debate. It doesn’t matter if you are large or small. But dealership cybersecurity measures are stuck in the mud. They don’t evolve. They don’t get better. In general, dealerships only seem to recognize the importance of cybersecurity after falling victim to a cyberattack. This reactive … Read more

The Right Way To Do MFA

Multi-Factor Authentication

As the incidence, severity, and sophistication of today’s cyber threats continues to grow, the appropriate use of multi-factor authentication (MFA) is becoming increasingly important.  Add to this that new government regulations – like the FTC Safeguards Rule – now requires that businesses implement MFA.  The result is a lot of confusion, inefficiency, and quite frankly … Read more