CDK
Jun 2024 · Graded Attested · Technology and Software · Beyond the filings
Incident summary
CDKJun 2024
$25M
Spent responding & recovering
Direct expense
CDK's ransomware event drove an immediate payment of $25mm in Bitcoin payments to the BlackSuit ransomware gang. A year before the incident CDK was acquired by a private equity organization, effectively turning it into a private company. Several public companies were impacted, resulting in 8k filings that show in excess of $1bn losses across the automotive industry.
Attested: a published report credits an identifiable source for this figure.
Company announcement
Initial attack type not disclosed · Impact ransomware confirmed + financial theft or fraud · Actor BlackSuit
What the company has said it cost
The company’s own disclosed figure, as it changed over time. The loss on the record is this same figure, typed and categorized.
About this record
This incident is beyond the filings: attributed to a company statement, a regulator or court record, or a news report, and graded Attested or Inferred. Every figure links to the source it was read from; if we have read one wrong, tell us at info@hackerinahoodie.com. This index never sums figures across incidents. See the methodology.