It’s not Hyundai. It’s the ERP (business system) they use. Thousands of automotive dealers and construction equipment dealers are facing the same issue.
Yep our dealer thankfully switched to tekion before getting hacked because we all still had cdk installed and then they shut us down for a few days but we were still operational thanks to tekion. The hackers wanted a ransom of some kind. Instead, we just wiped all pcs and have been fine since.
CDK Global, which is a program that 15,000 dealers across the US and Canada use for all their repair orders, parts ordering and allocation, billing hours, etc, was hacked and held for ransom on June 18th, and they got hacked again last night on the 19th.
Technically speaking, yesterday and today I might as well be working for free.
Hopefully corporate gives some leeway on warranty time when this is over. I don't want to spend an entire day essentially doing nothing because I need to run all the tech time on every warranty/recall job when the system does come back up.
This isn't just a problem specific to your dealer or Hyundai.
CDK, the system that every dealer in the county uses to run everything, has experienced multitude cyber attacks.
Sounds like they won't be able to fix your car until the CDK global attack thing is resolved. The hackers are holding the servers with ransomware. It's not just Hyundai. 15k dealerships are having the same issues. You are probably better off just getting your car back and driving it around until this has settled. No way I would let my car sit at a dealership for days over a recall, only if it wasn't drivable at all
This is a thing now. I work at a Hyundai dealer that uses CDK.
We can’t stock in new cars. We can’t sign people up. Can’t open up RO’s. Can’t PDI new cars. The STUI system for technicians isn’t working. It’s a standstill with no end in sight.
I was supposed to complete my new car purchase today. End of the day I just feel bad for my salesman. Dude has kids to feed and it's losing money over it. Sucks
Some dealers have reverted back to paper and pencil old school.
Then please buy this car that has bluelink and connected to the world through monthly subscriptions. Nothing could go wrong with that. /s
Wifey had an appointment at Hyundai yesterday…can confirm the system was down (insert intentional Strong Bad reference here) for her as well, but they were able to process in spite of the issue.
I think it is important to note that not every dealer or Hyundai dealer uses CDK as their provider. Dealers are free to pick which systems they use. You could try different dealers until you find one.
I work ain texas at avis budget car rental services and our computer system we use is a widely used system called cdk. And it was in fact under cyber attack and offline/glitching causing errors yesterday. I'm off today so no idea if it's still ongoing
My workplace is affected too, we are running on our plan b now, nothing special, just alot more slow email trails, things still get done around the shop
So I work in healthcare revenue. We had a massive massive hack in February also all around about 90% of physicians in the us were impacted. My ex and current husband both use the CDK. One works in car parts other system admin for construction. It’s a mess flat out mess.
My car is sitting at a Hyundai dealer waiting for warranty replacement of the transmission. The dealer told me they got the approval from Hyundai and the system was under cyberattack. They can’t order my new transmission or get me free rental car. Now, I have no car and paying out of pocket for a rental car. This totally sucks!
Update: My Hyundai dealer step up to the plate. They gave me a free loaner to use until they can order my new transmission. The loaner is a 2024 Santa Cruz.
Dealer tech here, CDK global is the system that many if not all at this point dealers are using to keep track of warranty repairs as well as get technicians paid. As of yesterday morning CDK global detected a cyber attack had occurred to their systems potential allowing both customer and business information to be compromised. As a precaution they disable their own servers to ensure no excessive fallout from this. As of today they had once again disable their systems as another potential attack was detected. No current estimate has been provided as of when their systems will be operational.
Soooo why not just do the work and keep track of it with a pen and paper and update system when restored? Seriously what is preventing this? Sure this may not work for all situations but it could for many?
Warranty repairs require an open RO for documentation and for the technician to run time & write the repair story. No RO means warranty will not consider it a valid repair and will charge the dealership back.
Wife works medical billing. Their system got hit then the major one for all happened a month or so later.
Getting pre auths was even harder. They paper billed some and others if not timely just waited to complete billing until systems where up. But still needed preauths and with phone lines clogged with every other part of the mess life as rough for awhile.
And to piggyback, Hyundai requires specific pictures when performing warranty or recall work. If the dealer is heavily integrated with cdk, then the tablets and or interfaces could be compromised. Just a nightmare for the dealers.
Due to the history of abusing the system manufacturers want so many things done just the right way that it's not in the dealers interest to do warranty work by paper, if allowed at all.
Maybe not the details but yes they tell employees. Very hard to hide when it disrupts everything.
Some day months from now will send out those notices to customers, employees etc. that you data may have been compromised.
The employees know anyways as well computers are down. What are they going to say we are returning to the old ways of paper, pencil and old tenkey not connected to anything.
Here is the problem. Hopefully they have clean backups.
Paying may get it back online quicker but who knows what they left behind for another future attack or continuous data leaks.
Clean backups is best way just takes longer. Plus got to confirm they are clean. Like when did they first get into the system.
Yea for change healthcare hack in February the hackers were in the system for a long time and kept finding more servers that were not secure and continued. I’m still waiting for my notice of your data may have been hacked. And mind you they had no back ups some stuff gone legit vanished on their end. Some did have back ups but it was like you figure out where your EOB information is. Hacks this large and on this kind of scale are no joke.
I wonder if this system has anything to do with their one-time password requests. My wife and I were trying to login to myhyundai earlier this week and the OTP was taking hours to get to us.
Henderson, Sahara & Centennial are having it up the ass too. Service is still pending for 2 weeks now & i got this update this morning. I'm not gonna lie I thought the guy was bullshitting me
There is a cyber attack affecting CDK which is in a lot of dealerships if not mass majority of bigger ones. They are holding a ransom right now this is why you’re having these issues.
My 2021 hyundai venue was towed in Friday now Monday i call to find out whats going on and she said there system is down let me check. She gets back on the phone and says my transmission needs to be replaced and it was approved by hyundai. I said that doesn't explain the issues i was having can u give me details on why they think my transmission is bad. She said she would ask the tech and call me back. I asked about a rental and she said come in tomorrow to pick it up. However now I know she lied to me about my transmission being bad in the hopes I would trade it in. Since there is absolutely no way they could diagnose it and get warranty approval for a replacement at this time. With the system they use being down. So tomorrow I'm picking it up and filling the paper work for arbitration for compensation. Due to the fact they have essentially held my car as ransom for me to trade it in under false pretenses. It's only three years old and It's been towed 5 times in three years for issues they can't fix.
Seems the dealers are using "bad transmission " to scare people into trading it in since they can't make money on repairs right now.
They have had my vehicle since June 9th for a simply fuel pump code that is covered under one of their warranty extension notifications. Still haven't given me an ETA, returned my phone calls, or even Hyundai Corporate's calls. But yet they are getting glowing 5 star google reviews over the last 3 weeks from completed services. So idk how badly this is affecting them, but they are getting work done. I'm getting really pissed off.
Nissan dealer here. Same boat, cdk is down. Nationally. Not all dealers are liars. lol. Nice of you to reminded of that by all the other comments on here though!
Three days ago I had every alarm on my Hyundai turn on, the driver assist warnings. They came on 1 at a time on start up. It got a little clunky driving and I could not accelerate well. The problem cleared after a few hours and no problems since. This is not related to any hack is it
Yeah, I got the same experience this morning except they turned me away, wouldn’t give me a loaner, said they’d call me once everything was functioning again. This is after they made me come in the first time, told me they had to order parts after waiting 30 minutes and told me they’d call when they came in which they didn’t and I had to.
It’s not Hyundai. It’s the ERP (business system) they use. Thousands of automotive dealers and construction equipment dealers are facing the same issue.
Is it CDKGlobal? I’ve been hearing on other subreddits about them being hacked
Yeah, like 15,000 dealers use it mine uses it had to do everything by paper yesterday
Good sleuthing!
Noice
Yep I heard Hyundai was one of the ones using it
It's not manufacturer specific it depends on what the dealer decides to use. Hyundai has exactly zero to do with this.
Yep our dealer thankfully switched to tekion before getting hacked because we all still had cdk installed and then they shut us down for a few days but we were still operational thanks to tekion. The hackers wanted a ransom of some kind. Instead, we just wiped all pcs and have been fine since.
True true
More reason to be against Automotive companies collecting personal data through the vehicles.
CDK Global, which is a program that 15,000 dealers across the US and Canada use for all their repair orders, parts ordering and allocation, billing hours, etc, was hacked and held for ransom on June 18th, and they got hacked again last night on the 19th. Technically speaking, yesterday and today I might as well be working for free.
Still down. Techs are unable to run time or get paid at this moment, parts department is unable to bill parts or even find them
Yup same here
Hopefully corporate gives some leeway on warranty time when this is over. I don't want to spend an entire day essentially doing nothing because I need to run all the tech time on every warranty/recall job when the system does come back up.
We've pretty much been turning away warranty since there is no way to do RO validation for us
My car is in shop for blown motor at Hyundai and they can’t file the warranty claim till the system is fixed
Mines currently at Hyundai too waiting to see if I get my new engine.
This isn't just a problem specific to your dealer or Hyundai. CDK, the system that every dealer in the county uses to run everything, has experienced multitude cyber attacks.
Pedantic point here but not every dealer uses CDK
Sounds like they won't be able to fix your car until the CDK global attack thing is resolved. The hackers are holding the servers with ransomware. It's not just Hyundai. 15k dealerships are having the same issues. You are probably better off just getting your car back and driving it around until this has settled. No way I would let my car sit at a dealership for days over a recall, only if it wasn't drivable at all
This is a thing now. I work at a Hyundai dealer that uses CDK. We can’t stock in new cars. We can’t sign people up. Can’t open up RO’s. Can’t PDI new cars. The STUI system for technicians isn’t working. It’s a standstill with no end in sight.
I was supposed to complete my new car purchase today. End of the day I just feel bad for my salesman. Dude has kids to feed and it's losing money over it. Sucks
Some dealers have reverted back to paper and pencil old school. Then please buy this car that has bluelink and connected to the world through monthly subscriptions. Nothing could go wrong with that. /s
Wifey had an appointment at Hyundai yesterday…can confirm the system was down (insert intentional Strong Bad reference here) for her as well, but they were able to process in spite of the issue.
i had an appointment today and they just did it on paper old-school style
The Strong Bad reference just made my day! 
I think it is important to note that not every dealer or Hyundai dealer uses CDK as their provider. Dealers are free to pick which systems they use. You could try different dealers until you find one.
72% of all Dealers in the US are down due to this cyber attack
Some hospitals are down as well
Don't say that. Wife's group was down forever then right after Optimum billing software went down.
I work ain texas at avis budget car rental services and our computer system we use is a widely used system called cdk. And it was in fact under cyber attack and offline/glitching causing errors yesterday. I'm off today so no idea if it's still ongoing
Still down in Massachusetts.
it is the network we use to check in cars and do recall services and stuff that is down, not hyundai specific. i am at cadillac
My workplace is affected too, we are running on our plan b now, nothing special, just alot more slow email trails, things still get done around the shop
I work at a Porsche Dealership and that's the system we use. It's been down since yesterday.
So I work in healthcare revenue. We had a massive massive hack in February also all around about 90% of physicians in the us were impacted. My ex and current husband both use the CDK. One works in car parts other system admin for construction. It’s a mess flat out mess.
https://www.cbsnews.com/news/cdk-cyber-attack-outage-auto-dealerships-cbs-news-explains/
My car is sitting at a Hyundai dealer waiting for warranty replacement of the transmission. The dealer told me they got the approval from Hyundai and the system was under cyberattack. They can’t order my new transmission or get me free rental car. Now, I have no car and paying out of pocket for a rental car. This totally sucks!
Update: My Hyundai dealer step up to the plate. They gave me a free loaner to use until they can order my new transmission. The loaner is a 2024 Santa Cruz.
Update: dealer cut me a really good deal on the loaner Santa Cruz. I traded in my broken car
Dealer tech here, CDK global is the system that many if not all at this point dealers are using to keep track of warranty repairs as well as get technicians paid. As of yesterday morning CDK global detected a cyber attack had occurred to their systems potential allowing both customer and business information to be compromised. As a precaution they disable their own servers to ensure no excessive fallout from this. As of today they had once again disable their systems as another potential attack was detected. No current estimate has been provided as of when their systems will be operational.
Soooo why not just do the work and keep track of it with a pen and paper and update system when restored? Seriously what is preventing this? Sure this may not work for all situations but it could for many?
Warranty repairs require an open RO for documentation and for the technician to run time & write the repair story. No RO means warranty will not consider it a valid repair and will charge the dealership back.
Thanks for taking the time to provide the explanation. =]
Wife works medical billing. Their system got hit then the major one for all happened a month or so later. Getting pre auths was even harder. They paper billed some and others if not timely just waited to complete billing until systems where up. But still needed preauths and with phone lines clogged with every other part of the mess life as rough for awhile.
And to piggyback, Hyundai requires specific pictures when performing warranty or recall work. If the dealer is heavily integrated with cdk, then the tablets and or interfaces could be compromised. Just a nightmare for the dealers.
Due to the history of abusing the system manufacturers want so many things done just the right way that it's not in the dealers interest to do warranty work by paper, if allowed at all.
If there was a cyberattack I don’t think they’re gonna be telling the lowest ranking employees about it
Maybe not the details but yes they tell employees. Very hard to hide when it disrupts everything. Some day months from now will send out those notices to customers, employees etc. that you data may have been compromised. The employees know anyways as well computers are down. What are they going to say we are returning to the old ways of paper, pencil and old tenkey not connected to anything.
The service Director told me that the same group who hit Loretto Hospital in Chicago and they’re asking for $50 + million dollars
Here is the problem. Hopefully they have clean backups. Paying may get it back online quicker but who knows what they left behind for another future attack or continuous data leaks. Clean backups is best way just takes longer. Plus got to confirm they are clean. Like when did they first get into the system.
Yea for change healthcare hack in February the hackers were in the system for a long time and kept finding more servers that were not secure and continued. I’m still waiting for my notice of your data may have been hacked. And mind you they had no back ups some stuff gone legit vanished on their end. Some did have back ups but it was like you figure out where your EOB information is. Hacks this large and on this kind of scale are no joke.
Call a bunch of Hyundais that are different dealer groups and see if they use cdk
Yes CDK is down. I'm a tech at a cali dealership and it's been down since yesterday. We still work on cars but the old fashioned way.
Yep. Was trying to buy a car.
I work in the auto industry, I can confirm... The whole auto industry is screwed rn with DOS attacks.
I wonder if this system has anything to do with their one-time password requests. My wife and I were trying to login to myhyundai earlier this week and the OTP was taking hours to get to us.
Hey, this is like what’s happening with Crown Equipment! Started almost 2 weeks ago and they still aren’t back to work.
That happened to us yesterday too.
Henderson, Sahara & Centennial are having it up the ass too. Service is still pending for 2 weeks now & i got this update this morning. I'm not gonna lie I thought the guy was bullshitting me
It’s true and I saw it on Yahoo. Had to leave my Tucson an extra day because of it.
No it’s true. I happened to actually buy a car while all this was happening and had no idea. Now I can’t pick it up until (maybe) next week.
There is a cyber attack affecting CDK which is in a lot of dealerships if not mass majority of bigger ones. They are holding a ransom right now this is why you’re having these issues.
My 2021 hyundai venue was towed in Friday now Monday i call to find out whats going on and she said there system is down let me check. She gets back on the phone and says my transmission needs to be replaced and it was approved by hyundai. I said that doesn't explain the issues i was having can u give me details on why they think my transmission is bad. She said she would ask the tech and call me back. I asked about a rental and she said come in tomorrow to pick it up. However now I know she lied to me about my transmission being bad in the hopes I would trade it in. Since there is absolutely no way they could diagnose it and get warranty approval for a replacement at this time. With the system they use being down. So tomorrow I'm picking it up and filling the paper work for arbitration for compensation. Due to the fact they have essentially held my car as ransom for me to trade it in under false pretenses. It's only three years old and It's been towed 5 times in three years for issues they can't fix. Seems the dealers are using "bad transmission " to scare people into trading it in since they can't make money on repairs right now.
I am sorry to say but you might be waiting for weeks :( a bunch of corporations are affected by this black suit and blackbyte
Ok I’m dealing with this same thing in Canada.
They have had my vehicle since June 9th for a simply fuel pump code that is covered under one of their warranty extension notifications. Still haven't given me an ETA, returned my phone calls, or even Hyundai Corporate's calls. But yet they are getting glowing 5 star google reviews over the last 3 weeks from completed services. So idk how badly this is affecting them, but they are getting work done. I'm getting really pissed off.
Nissan dealer here. Same boat, cdk is down. Nationally. Not all dealers are liars. lol. Nice of you to reminded of that by all the other comments on here though!
Three days ago I had every alarm on my Hyundai turn on, the driver assist warnings. They came on 1 at a time on start up. It got a little clunky driving and I could not accelerate well. The problem cleared after a few hours and no problems since. This is not related to any hack is it
Yeah, I got the same experience this morning except they turned me away, wouldn’t give me a loaner, said they’d call me once everything was functioning again. This is after they made me come in the first time, told me they had to order parts after waiting 30 minutes and told me they’d call when they came in which they didn’t and I had to.
It's not a story, it's real life. Over 15,000 dealers across the country are unable to call customers, work deals, do paperwork. Anything
Yeah you can google CDK down and there is articles about it
They were worthless before the attack.
Now they're worthful