CDK reportedly paid \$25 million in bitcoin

web

CNN·edition.cnn.com/2024/07/11/business/cdk-hack-ransom-tweny...

Credibility Rating

3/5

Good(3)

Good quality. Reputable source with community review or editorial standards, but less rigorous than peer-reviewed venues.

Rating inherited from publication venue: CNN

This CNN news article covers a real-world ransomware case relevant to understanding systemic risks from cyberattacks on critical software infrastructure, though it has limited direct relevance to core AI safety research.

Metadata

Importance: 22/100news articlenews

Summary

CDK Global, a software provider serving thousands of US auto dealerships, reportedly paid approximately $25 million in bitcoin to BlackSuit ransomware hackers following a June 2024 cyberattack. Blockchain data shows ~387 bitcoin was transferred to a hacker-controlled account on June 21, 2024, after which CDK began restoring dealer access. The incident illustrates how ransomware attacks on critical software infrastructure can cascade across entire industries.

Key Points

•CDK Global paid ~387 bitcoin (~$25M) to BlackSuit ransomware group on June 21, 2024, per blockchain tracking firm TRM Labs.
•The attack disrupted software services for thousands of auto dealerships across the US and Canada for weeks.
•CDK began restoring dealer systems approximately one week after the ransom payment was made.
•Despite cryptocurrency's relative anonymity, blockchain records provided a traceable trail confirming the payment.
•The incident highlights systemic risk when a single software provider serving a whole industry is compromised.

Cited by 1 page

Page	Type	Quality
Cyberweapons Risk	Risk	91.0

Cached Content Preview

HTTP 200Fetched Mar 20, 20269 KB

[Skip to main content](https://edition.cnn.com/2024/07/11/business/cdk-hack-ransom-tweny-five-million-dollars#maincontent)

Markets

DOW46,021.43-203.720.44%

S&P 5006,606.49-18.210.27%

NASDAQ22,090.69-61.730.28%

Hot Stocks

[NVDA](https://edition.cnn.com/markets/stocks/NVDA)

NVIDIA Corporation

178.56

\- 1.84

1.02%

[VG](https://edition.cnn.com/markets/stocks/VG)

Venture Global, Inc. Class A

14.29

\- 0.56

3.77%

[RIVN](https://edition.cnn.com/markets/stocks/RIVN)

Rivian Automotive, Inc. Class A

16.12

\+ 0.59

3.80%

Fear & Greed Index

[\-\-\--- is driving the US market](https://edition.cnn.com/markets/fear-and-greed?utm_source=business_ribbon)

Latest Market News

- [Nexstar says it has acquired Tegna as state AGs push to block the merger](https://edition.cnn.com/2026/03/19/media/nexstar-tegna-merger-trump-state-ag-bonta?utm_source=business_ribbon)
- [Nashville immigration reporter Estefany Rodríguez released from ICE custody](https://edition.cnn.com/2026/03/19/media/estefany-rodriguez-nashville-ice-released?utm_source=business_ribbon)
- [Trump’s promised ‘manufacturing boom’ couldn’t save these Whirlpool jobs](https://edition.cnn.com/2026/03/19/business/whirlpool-tariffs-trump?utm_source=business_ribbon)

[\-\-\--- is driving the US market](https://edition.cnn.com/markets/fear-and-greed?utm_source=business_ribbon)

Something isn't loading properly. Please check back later.

Ad Feedback

# How did the auto dealer outage end? CDK almost certainly paid a $25 million ransom

[![Sean Lyngaas](https://media.cnn.com/api/v1/images/stellar/prod/230627142321-sean-lyngaas-headshot.jpg?c=16x9&q=h_270,w_480,c_fill/c_thumb,g_face,w_100,h_100)](https://www.cnn.com/profiles/sean-lyngaas)

By [Sean Lyngaas](https://www.cnn.com/profiles/sean-lyngaas), CNN


4 min read


Published
7:51 PM EDT, Thu July 11, 2024


[Share with email](mailto:?subject=CNN%20content%20share&body=Check%20out%20this%20article%3A%0Ahttps%3A%2F%2Fwww.cnn.com%2F2024%2F07%2F11%2Fbusiness%2Fcdk-hack-ransom-tweny-five-million-dollars "Share with email")

Link Copied!


Follow:

Auto industry[See your latest updates](https://edition.cnn.com/follow?iid=follow_see_all_article&source=acq_web_experiments_follow_card-social-bar-all)

![Vehicles sit in a row outside a car dealership, June 2, 2024, in Lone Tree, Colo. CDK Global, a company that provides software for thousands of auto dealers in the US and Canada, was hit by a cyberattack in June.](https://media.cnn.com/api/v1/images/stellar/prod/ap24173573478471.jpg?c=16x9&q=h_833,w_1480,c_fill)

Vehicles sit in a row outside a car dealership, June 2, 2024, in Lone Tree, Colo. CDK Global, a company that provides software for thousands of auto dealers in the US and Canada, was hit by a cyberattack in June.

David Zalubowski/AP

CNN
—


CDK Global, a software firm serving car dealerships across the US that was roiled by a cyberattack last month, appears to have paid a $25 million ransom to the hackers, multiple sources familiar with the ma

... (truncated, 9 KB total)

Resource ID: 2bda6d916ffd1f95 | Stable ID: NzgyNGZhYz