Auto retailers and car dealerships across the U.S. are facing another day of outages after a second cyberattack hit tech company CDK Global, which develops software used for managing auto customers and their vehicles.
In a message from CDK sent to customers Thursday, the company said the additional cyberattack late Wednesday may result in extended outages.
“At this time, we do not have an estimated time frame for resolution and therefore our dealers’ systems will not be available at a minimum on Thursday,” the message read.
CDK said that its customer support teams “remain unavailable” as a precautionary measure to maintain security.
When reached by TechCrunch, CDK spokesperson Lisa Finney confirmed the second incident and another shutdown of “most of our systems.”
“In partnership with third party experts, we are assessing the impact and providing regular updates to our customers. We remain vigilant in our efforts to reinstate our services and get our dealers back to business as usual as quickly as possible,” said Finney.
The company’s website says its software runs in about 15,000 dealerships.
Disrupt 2026: The tech ecosystem, all in one room
Your next round. Your next hire. Your next breakout opportunity. Find it at TechCrunch Disrupt 2026, where 10,000+ founders, investors, and tech leaders gather for three days of 250+ tactical sessions, powerful introductions, and market-defining innovation. Register now to save up to $400.
Save up to $300 or 30% to TechCrunch Founder Summit
1,000+ founders and investors come together at TechCrunch Founder Summit 2026 for a full day focused on growth, execution, and real-world scaling. Learn from founders and investors who have shaped the industry. Connect with peers navigating similar growth stages. Walk away with tactics you can apply immediately
Offer ends March 13.
News of the cyberattack broke early Wednesday as car dealerships reported outages with their CDK-run dealer management systems, which allow dealers to handle customer appointments, vehicle records and other information. Several CDK customers took to social media and Reddit saying the outages forced staff to find workarounds that do not rely on the downed software.
CDK did not describe the nature of the initial cyberattack, but said that CDK shut down all of its systems on Wednesday. Some CDK functions began to return on Wednesday afternoon, according to Bloomberg, which first reported the ongoing cyberattack. It’s not clear if, or how, the second cyberattack is related to the first.
CDK did not answer TechCruch’s specific questions about the incidents, including if it’s aware of any exfiltration of data from its systems. It’s not yet clear if the company has the ability to determine what customer data, if any, was stolen.
Updated on June 20 at 1 p.m. ET with CDK’s latest statement.
Do you know more about the CDK cyberattacks? Get in touch. To contact this reporter, get in touch on Signal and WhatsApp at +1 646-755-8849, or by email. You also can send files and documents via SecureDrop.
