5 Min ReadFebruary 13, 2019

Protecting Your Dealership from Cyberattacks in 2019

Protecting Your Dealership from Cyberattacks in 2019

The majority of IT professionals at dealerships across the country agree that it’s not a matter of if, but when your dealership will fall prey to targeted attacks involving malware, ransomware, data exfiltration, or phishing. According to the CDK Global 2018 Dealership Cybersecurity Study, an alarming 85 percent of IT-related employees told us their dealership was the victim of a cybersecurity incident in the last two years, while 67 percent of respondents felt confident in their cybersecurity measures before the incident.

Are auto dealers really doing enough to protect their business?

While 70 percent of respondents said they invest in cybersecurity protection to safeguard from potential loss of money, property or data from a cyberattack, only 37 percent of survey takers listed “having a defined process in place to quickly identify a security breach.” This can be attributed to a variety of reasons, including:

Network Protect Blog Image

Dealers need to assume they are being targeted by advanced attackers and must take a proactive approach to security. They should look toward innovative technologies to support them and their teams — especially as the average dealer network performs hundreds to thousands of tasks, resulting in a high risk for potential attacks. As dealerships purchase multiple point solutions to solve for IT operations and security challenges, their IT infrastructures become vulnerable to threats. The day-to-day responsibility of cyber threat defense and protecting dealer networks 24/7 is no easy task and auto dealers can’t do it alone.

A strategy for business resilience starts with ensuring real-time visibility into where threats exist across the network, most crucially at the endpoints. If a dealer can’t pinpoint current vulnerabilities or the origin of a threat, how can they expect to defend against these threats? According to the 2018 Dealership Cybersecurity Study, when posed with the statement, “I am confident that the security measures we currently have in place will protect our dealership from future cyberattacks and the loss of sensitive data,” over 60 percent of IT-related employees agreed, while less than 20 percent disagreed or strongly disagreed. Despite overconfidence and reliance on point cybersecurity solutions, safeguarding customer information requires a team of experts available 24/7/365 with deep security knowledge and expertise.

When conducting research for the 2018 Dealership Cybersecurity Study, we asked IT leaders what technical cybersecurity protections they have in place. The top 10 responses:

Network Protect Blog Image

What to expect in 2019

In the 2018 Dealership Cybersecurity Study, we sent a survey to over 6,000 dealerships, targeting IT-related professionals with knowledge of the cybersecurity protections being administered at their dealership. With these survey results in mind, we can look at the emergent technology of today to make some predictions about what is in store for cybersecurity in the coming year. We asked IT leaders what cybersecurity incidents they had been the victim of during the last two years.

These top five responses highlight some of the possible threats to expect in 2019:


 Software virus that damages or disables computers


 Email phishing scams, resulting in financial or information loss


 Human error by a well-intentioned employee


 Ransomware incident


 Electronic fraud or misrepresentation of information for financial gain

Cybersecurity Automation

Auto dealers simply don’t have the resources for 24-hour security monitoring — or the expertise to navigate an ever-changing threat landscape. As dealer enterprise networks become larger, automation and artificial intelligence may start to play a more pivotal role in the day-to-day work order of cybersecurity and monitoring the network for threats. Many security information and event management (SIEM) companies are rolling out cybersecurity management platforms that harness the power of automation.

At CDK, we make cybersecurity a top priority for our customers by providing a complete security solution for dealerships — complete with security event visibility to help meet industry compliance requirements. Our solution includes log management, network monitoring and analysis, and threat remediation. Driven by next-generation SIEM and a highly skilled team of security engineers working around the clock, CDK provides the monitoring and diligence dealerships need for compliance, real security and peace of mind.

Ransomware and Phishing Attacks

Cybercrime is growing more sophisticated each year, and ransomware is proving to be highly successful and extremely profitable. Ransomware, a form of malware, or malicious software, is more complicated than typical malware as it can essentially lock a user out of the entire system. It presents users with an ultimatum: pay a fee to unlock and reclaim personal data, or don’t pay the fee and lose the data indefinitely.

In our survey, 86 percent of respondents said they were generally aware of most cybersecurity threats, including ransomware and phishing. Many dealerships buy and control separate devices — often from multiple vendors — making it harder to deploy strategic and unified cybersecurity network solutions to combat attacks. Ideally, cybersecurity leaders would like to see these endpoints in a comprehensive suite provided by a single vendor.

Cybercrime continues to rise, and so does the demand for security professionals that can remediate these types of threats — a demand the current workforce has just not been able to match.

Cybersecurity Service Providers

Only time will tell us what the cybersecurity world has in store for 2019. One thing is certain: cybersecurity is increasingly becoming a more prevalent – and more complex – factor in the dealership and car-buying environment. However, dealer IT professionals still face many barriers when it comes to implementing the most effective cybersecurity strategies. In an ever-changing world of new technologies and threats, dealer IT professionals are finding it hard to dedicate the resources and time necessary to keep up.

Because of these barriers and unknowns, many dealerships are joining forces with a Managed Security Service Provider (MSSP). These dedicated cybersecurity providers are not only equipped with the latest in threat management technology, they also understand the current environment and work toward staying ahead of emerging cyber threats. By using an MSSP, many dealerships can get help with intelligently investing in the right cybersecurity solution to help protect against — and respond to — cyberattacks in 2019 and beyond.

Share This

CDK Global
By CDK Global

Recent Insights

Are E Vs Ready for the Summer Road trip?

Are EVs Ready for the Summer Road Trip?

The all-American pastime of the summer road trip is alive and well. The Transportation Department reported travel rose to over...
4 Min ReadMay 20CDK Global
Dealers Not Confident in O E M E CDK recently released the Dealers Face the EV Transition white paper, which details the pessimism many dealers feel about the electric future. A clear majority (65%) indeed admit to being pessimistic about EVs, and the paper delves into many of the reasons behind that number including the impact to the dealership’s revenue, consumer interest and more.   We also asked dealers about their confidence level in the EV strategy of their respective OEMs. Whether they hV Strategies.

Dealers Aren't Confident in OEM EV Strategies

CDK recently released the Dealers Face the EV Transition white paper, which details the pessimism many dealers feel about the...
2 Min ReadMay 13David Thomas
Bring Modern Convenience to the Showroom Floor.

Bring Modern Convenience to the Showroom Floor

In our technology-driven world, we’ve taken modern convenience to a whole-new level. Consumers expect to order what they need online...
3 Min ReadMay 9Steven Walker
What Dealers Say About the EV Transition

What Dealers Say About the EV Transition

As the electric vehicle revolution propels forward, dealers across the country are coming to terms with learning, selling and servicing...
1 Min ReadMay 6CDK Global
Three Dealership Accounting Woes and Fixes.

Three Dealership Accounting Woes and Fixes

Nothing can steer your auto dealership off course faster than poor accounting practices. And it’s not just about the importance...
4 Min ReadMay 6CDK Global
Car Price Negotiations Ease in April

Car Price Negotiations Ease in April

Car buyers still found it overwhelmingly easy to buy a new car in April but there was a slight drop...
3 Min ReadMay 2David Thomas
The Power of Video. Earn Customer Trust and Service Business.

The Power of Video: Earn Customer Trust and Service Business

When you spend your days servicing and repairing vehicles, it’s easy to forget that most people know very little about...
3 Min ReadApr 29CDK Global
Everything You Need to Know About the C D K Dealership Experience.

Everything You Need to Know About the CDK Dealership Xperience

Margin compression and changing customer expectations have auto dealers working hard to find new process efficiencies to boost profits and...
9 Min ReadApr 19CDK Global
The Pros and Cons of Involving Sales Staff in F and I.

The Pros and Cons of Involving Sales Staff in F&I

We know how the traditional F&I sales process works and why customers sometimes shut down as a new round of...
4 Min ReadApr 16Saundi Crandall
Leverage A I for a More Efficient Front Office.

Leverage AI for a More Efficient Front Office

Today, dealers echo one refrain in terms of their top strategy: Deliver a terrific customer experience. It’s become one of...
3 Min ReadApr 9Amber Good