Technology
Ransomware attack paralyzes thousands of car dealerships nationwide into July
Cybercriminals paralyzed car dealership software provider CDK Global with back-to-back ransomware attacks. The result has car dealerships reverting to paper and pens to work out many of their computerized functions.
The first attack caused CDK to take its two data centers offline, and once it was recovering from the attack that affected thousands of car dealerships across the U.S., the hackers struck again.
The second attack occurred on June 19, again forcing CDK to shut down its systems.
GET SECURITY ALERTS, EXPERT TIPS – SIGN UP FOR KURT’S NEWSLETTER – THE CYBERGUY REPORT HERE
A BMW car dealership (Kurt “CyberGuy” Knutsson)
What you need to know about the CDK cyberattack
The cyberattacks on CDK Global didn’t only impact the company but also its thousands of customers and regular folks who were planning to buy new automobiles.
CDK Global is a SaaS provider to clients in the auto industry. It provides car dealerships with software to handle operations like financing, inventory, back office, payroll and more. CDK’s services are used by over 15,000 car dealerships across North America. The company also employs thousands of people.
Timeline of the attacks
Cybercriminals targeted CDK twice. The first attack occurred this month, and while CDK Global didn’t reveal details, Bleeping Computer reported it was related to the company’s always-on VPN.
Car dealerships use a special kind of VPN connection that’s always on to connect to CDK’s data centers. This lets their dealership software, installed on their computers, access CDK’s platform. Since the CDK software has permission to update itself (like admin privileges) automatically, it makes sense why CDK recommended disconnecting from their data centers during the security incident.
CDK reported restoring some services on June 20 and told CyberGuy that its systems were again offline due to another cyberattack.
“Late in the evening of June 19, we experienced an additional cyberincident and proactively shut down most of our systems. In partnership with third-party experts, we are assessing the impact and providing regular updates to our customers,” said Lisa Finney, senior external communications manager at CDK Global.
“We remain vigilant in our efforts to reinstate our services and get our dealers back to business as usual as quickly as possible,” Finney added.
CDK Global announced on June 24 that the breach was, in fact, a ransomware attack, meaning the company’s systems won’t be back online until it pays the hackers a ransom. CDK’s software remains down as of this writing, and Reuters reported that it won’t be back online until the end of June.
Bloomberg reported that a hacking group called BlackSuit is behind the cyberattack on CDK Global, demanding an extortion fee of tens of millions of dollars.
BMW sales car lot (Kurt “CyberGuy” Knutsson)
PHARMA GIANT’S DATA BREACH EXPOSES PATIENTS’ SENSITIVE INFORMATION
How are dealerships responding?
Car dealerships across the U.S. are feeling the pinch from the CDK cyberattack. But some dealerships are showing their resourcefulness. Employees are taking to social media, like Reddit, to share how they’re keeping things going with spreadsheets and sticky notes. This allows them to handle smaller sales and repairs, but for now, bigger transactions are on hold.
Big names like Honda, Toyota and Hyundai are closely monitoring the situation to see how badly the outage is hurting dealerships. Honda even went further, telling affected dealerships to use alternative tools and processes to keep business running smoothly while CDK gets its systems back online.
MASSIVE FREE VPN DATA BREACH EXPOSES 360 MILLION RECORDS
How does the CDK cyberattack impact you?
Car dealerships rely on CDK’s software to manage various aspects of their operations, including financing and inventory management. When these systems are down, it can delay the process of purchasing a car, affecting those who are in the market for a new vehicle.
If you’re seeking services from dealerships, such as maintenance or repairs, you may experience delays or disruptions because the dealership’s management systems are offline. CDK’s software also helps dealerships manage financing and leasing agreements. The cyberattack has disrupted these processes, leading to delays in securing loans or leases for customers.
Toyota dealership (Kurt “CyberGuy” Knutsson)
TICKETMASTER DATA BREACH EXPOSES 560 MILLION CUSTOMERS’ DATA SAYS IT GROUP
Cybersecurity lessons you can learn from the CDK global attack
The CDK Global cyberattack serves as a stark reminder of the vulnerabilities inherent in our digital world and the far-reaching consequences of such breaches. This incident underscores several key security considerations you should take into account:
1. Ransomware awareness and prevention
The revelation that the attack involved ransomware highlights the ongoing threat posed by this type of malware. It’s a reminder that you need to be vigilant about the security of your personal devices. Here are some steps you can take:
Regular backups: Ensure that you regularly back up important data to an external hard drive or a secure cloud service. This can help you recover your data without paying a ransom if your device is compromised.
Update software: Keep your operating system, antivirus software and all applications up to date to protect against known vulnerabilities.
Email caution: Be wary of unsolicited emails, especially those with attachments or links. Phishing emails are a common method for delivering ransomware. The best way to protect yourself from clicking malicious links that install malware that may get access to your private information is to have antivirus protection installed on all your devices. This can also alert you of any phishing emails or ransomware scams. Get my picks for the best 2024 antivirus protection winners for your Windows, Mac, Android and iOS devices.
CLICK HERE FOR MORE U.S. NEWS
2. Strong authentication and access controls
While the CDK attack involved always-on VPN connections, the principle of strong authentication applies to you as well. Protect your accounts with:
Two-factor authentication (2FA): Enable 2FA on all accounts that offer it. This adds an extra layer of security beyond just a password.
Unique passwords: Use unique, complex passwords for different accounts. Consider using a password manager to keep track of them.
3. Incident response and personal data protection
The prolonged outage and its impact on dealership operations underscore the need for you to have your own incident response plan:
Know your recovery steps: Familiarize yourself with the steps to take if your device is compromised, such as disconnecting from the internet, running antivirus scans and restoring from backups.
Protect personal information: Be cautious about sharing personal information online. Use privacy settings on social media and be mindful of the data you share with various services.
4. Regular security audits
Just as businesses need to assess their security regularly, you should also:
Review account activity: Regularly check your bank and credit card statements for any unauthorized transactions.
Security settings: Periodically review and update the security settings on your devices and online accounts.
By taking these proactive steps, you can significantly reduce your risk of falling victim to cyberattacks. The CDK Global incident serves as a powerful reminder that cybersecurity is not just a concern for businesses but for you and everyone in our increasingly digital world.
Kurt’s key takeaways
When a company of CDK’s scale is affected by a ransomware attack, it disrupts the whole market, which is something we are witnessing right now. Many dealerships in the U.S. use CDK Global’s software, meaning their business is paralyzed unless they can find another alternative. The company should work on tightening its security systems and hurry to deal with cybercriminals to minimize the losses suffered by dealerships.
What role should government and regulatory bodies play in supporting businesses affected by ransomware attacks? Let us know by writing us at Cyberguy.com/Contact.
For more of my tech tips and security alerts, subscribe to my free CyberGuy Report Newsletter by heading to Cyberguy.com/Newsletter.
Ask Kurt a question or let us know what stories you’d like us to cover.
Follow Kurt on his social channels:
Answers to the most asked CyberGuy questions:
Copyright 2024 CyberGuy.com. All rights reserved.
Technology
Medical identity theft follows you into the doctor’s office
NEWYou can now listen to Fox News articles!
The Justice Department recently charged 455 people in its annual National Health Care Fraud Takedown. The cases involve more than $6.5 billion in alleged false claims. More state Medicaid units took part than in any prior year. Ninety of the accused are doctors or other licensed medical professionals. The DOJ says prosecutors still must prove the charges in court.
Many schemes used other people’s medical identities. Prosecutors also added aggravated identity theft charges in cases across dozens of states. In one case, the co-owner of a Virginia mental health company allegedly paid homeless people with hotel stays. Prosecutors say the company used their Medicaid numbers, then billed Medicaid for crisis services the patients never got.
For the people whose numbers got used, the case file may eventually close. Their medical records may not be so easy to fix. Once someone else’s treatment shows up under your name, it can add wrong information to your chart. It can also use up insurance benefits you may need later. That is harder to undo than canceling a credit card.
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
DR OZ WARNS MEDICARE SCAMMERS ARE STEALING BILLIONS — AND YOUR PERSONAL INFORMATION COULD BE NEXT
Medical identity theft can put someone else’s claims, prescriptions or diagnoses into your health records, creating problems that can follow you into a doctor’s office. (iStock)
The identity thief’s treatment gets written into your file
Medical identity theft happens when someone uses your name, Social Security number (SSN), health insurance account number, or Medicare number to see a doctor, fill a prescription, buy medical equipment, or submit a claim, according to the Federal Trade Commission (FTC).
When care is billed under your name, the thief’s health information can blend into yours. The FTC warns that mixed records can affect the care you’re able to get and the benefits you are able to use. A blood type, a drug allergy, a diagnosis, or a prescription that belongs to a stranger can sit in the file a physician reads before treating you.
Data breaches can feed the market for medical identity theft
Hospitals and insurers hold the exact records that make the fraud work, and those records are stolen often. This does not mean every healthcare breach leads to fraud. However, it explains why your insurance number, Medicare number, SSN and medical records can become valuable long after a breach notice arrives.
This spring, NYC Health + Hospitals reported that an intruder had copied files that may have included health insurance information, medical information, biometric data, billing data and other personal information. The breach was later reported to affect roughly 1.8 million current and former patients and employees.
Once a name, SSN, insurance number, Medicare number or medical record reaches a criminal marketplace, it can be resold to operators who bill under someone else’s identity.
Treat your insurance card like a credit card
Your health insurance and Medicare numbers are what these operations need, so the FTC recommends guarding them the way you would a payment card.
- Keep enrollment forms, benefit statements, and prescription labels somewhere secure, and shred them before throwing them out.
- When a doctor’s office asks for your SSN, ask whether it can use another identifier or the last four digits instead.
- Be wary of anyone who calls, texts, or emails offering free braces, genetic tests, or medical supplies in exchange for your Medicare number; several of the schemes in the June takedown billed Medicare for exactly those items.
- If you are on Medicare, create or log in to your secure Medicare account and review your claims. You can also check your Medicare Summary Notice for services, supplies or equipment you do not recognize. If something looks wrong, call 1-800-MEDICARE.
HOSPICE FRAUD USES STOLEN IDENTITIES FOR FAKE PATIENTS
Experts urge patients to treat insurance cards like credit cards and quickly challenge unfamiliar medical bills, claims or benefits notices. (iStock)
Your credit report may never flag this fraud
Because a fraudulent medical claim runs through insurance and provider systems instead of a credit check, it skips the alerts most people rely on.
Here’s what the FTC says you should look out for:
- A bill or an Explanation of Benefits (EOB) statement for care you never received
- A call from a debt collector about a medical debt you do not owe
- A medical collection you do not recognize on your credit report
- A notice from your insurer that you have reached your benefit limit
- A Medicare Summary Notice that lists services, supplies or equipment you never received
What to do first if a medical claim looks wrong
If a bill, EOB or Medicare notice shows care you never received, move quickly and keep everything in writing.
1) Call your insurer or Medicare directly
Call your insurer or Medicare using the number on your card, not a number from a random text, email or voicemail.
2) Get the claim details
Ask for the provider name, date of service, claim number and service details.
3) Request the records in writing
Contact the provider in writing and request the medical or billing records tied to that claim.
4) Report the error
Report the error to your insurer’s fraud department.
5) File an identity theft report
File a report at IdentityTheft.gov if your medical identity was used. That gives you a recovery plan and documentation you may need if fraudulent bills or collections show up later.
6) Save every document
Keep copies of every bill, EOB, letter, portal message, police report and case number.
Correcting a medical file is slower than disputing a charge
Request your records from every provider, clinic, pharmacy, lab and insurer the thief may have used, then report each error in writing. Under HIPAA, a provider generally has 30 days to give you access to your records after a written request, with a possible 30-day extension.
Fixing the record itself can take longer. HHS says a covered provider or health plan usually has up to 60 days to act on a request to amend a medical record, with a possible 30-day extension in certain cases. If the provider or plan created the wrong information, it must amend inaccurate or incomplete information.
There’s one catch, though: a provider may refuse to release records that now contain a stranger’s information, citing that person’s privacy. If that happens, ask for the provider’s privacy officer or patient advocate. You can also file a complaint with the U.S. Department of Health and Human Services Office for Civil Rights if you do not get your records or an explanation within the required window.
TEXAS DATA BREACH HITS 3M LICENSE CUSTOMERS
Stolen Medicare, Medicaid or insurance numbers can be used to bill for care, medical equipment or prescriptions patients never received. (kali9/Getty Images)
A credit freeze alone won’t stop a claim under your insurance
A freeze blocks new accounts, but it does nothing about a claim filed with your insurance number. Because medical identity theft can move without touching your credit file, monitoring where your personal information appears is the earliest way to act on it.
An identity theft protection service can monitor the dark web, data broker sites and people-search sites for exposed SSNs, driver’s license numbers, medical ID numbers and email addresses. It can also track all three credit bureaus for medical collections that may follow and flag public-record changes tied to your name.
If misuse happens, some services include fraud resolution support to help you request records, dispute fraudulent claims and work with providers, insurers and credit bureaus. Some plans also include identity theft insurance for eligible recovery costs.
No service can prevent every misuse of your medical identity. However, ongoing monitoring may flag exposed information before another person’s treatment reaches your records and your insurance.
See my tips and best picks on Best Identity Theft Protection at CyberGuy.com.
Kurt’s key takeaways
Medical identity theft hits in a place most of us rarely check: our health records. A stolen credit card can usually be canceled quickly. A stolen Medicare or insurance number can create fake claims, wrong diagnoses and benefit headaches that follow you long after the fraud case ends. I would not wait for a credit alert here. Check your EOBs, Medicare Summary Notices and insurer portals for visits, prescriptions or equipment you never received. Also, treat your insurance card like a payment card. Do not give the number to anyone who calls, texts or emails out of nowhere with a free offer. The most important thing is to act fast. Call your insurer or Medicare, ask for the claim details and request your medical records in writing. Then file at IdentityTheft.gov, so you have the paperwork you need if fraudulent bills or collections show up later.
Have you ever spotted a medical bill, insurance claim or EOB for care you never received? Let us know by writing to us at CyberGuy.com.
CLICK HERE TO DOWNLOAD THE FOX NEWS APP
Sign up for my FREE CyberGuy Report
- Get my best tech tips, urgent security alerts and exclusive deals delivered straight to your inbox.
- For simple, real-world ways to spot scams early and stay protected, visit CyberGuy.com – trusted by millions who watch CyberGuy on TV daily.
- Plus, you’ll get instant access to my Ultimate Scam Survival Guide free when you join.
Copyright 2026 CyberGuy.com. All rights reserved.
Technology
Meta is reportedly working on smart glasses that would be recording all the time
Meta might be the next company to make an always-on AI wearable. The company is working on prototype “super sensing” always-aware smart glasses that could continuously record audio and snap photos “every few seconds,” according to the Financial Times. The wearer could then ask Meta AI about the captured audio and images.
However, the images and audio might not be directly available to the user. Here’s how the FT describes one way the glasses could use the data:
In one proposed system, raw footage and audio would not be stored by Meta or made available to the user, several people said. Instead, the metadata from that audio and images would be extracted and uploaded to the server for Meta’s AI to query, which proponents argue would have fewer privacy implications.
But currently, Meta is planning for the LED recording indicator to remain off in “super sensing” mode, the FT reports. In a July 2025 whitepaper, the company said that it would reserve the LED indicator for “active capture” scenarios where the user is saving photos or videos, and leave it off during “AI Feature” use — such as scanning a menu — to avoid users becoming too used to the indicator. (If the indicator was on during the “super sensing” mode, it might also be harder to know when the glasses are actually recording video.)
Meta is also discussing if it would use the captured data for training its AI models. It may also bring the “super sensing” features to glasses it has already released, the FT says.
“While we don’t comment on internal prototypes, we’re committed to getting our glasses right because they need to be loved by both people wearing them and those around them,” Meta spokesperson Dave Arnold says in a statement to The Verge. Arnold also notes that “Our approach has been to develop new technologies that will help people throughout their day, with privacy built in from the ground up.”
Meta hasn’t been shy about some type of always-aware glasses being a possibility. CEO Mark Zuckerberg, in the company’s Q1 2026 earnings call, said that he was “really excited to see the glasses evolve from being able to answer questions to being able to be a personal agent that’s with you all day long, helping you remember things and achieve your goals.” In a March blog post about new Ray-Ban Meta glasses, the company wrote that “with ongoing software updates, Meta AI on glasses will transition from something you have to prompt with a question each time, to a more continuous, in-the-moment assistant that can help throughout the day.”
Technology
Get a $30 credit when you reserve Samsung’s upcoming Galaxy phones
Even though they haven’t been officially announced yet, Samsung is giving you a chance to save some cash when you preorder what we’re expecting to be the brand’s updated Galaxy Z Fold phones. The next Galaxy Unpacked event will take place on July 22nd, 2026, and features the tagline “A new shape unfolds.” In addition to seeing updated versions of the existing Flip and Fold form factors, we anticipate the debut of a new, wider foldable phone. If you register your interest ahead of time and end up preordering one of the new phones shortly after they’re announced, Samsung will give you a $30 store credit at checkout.
There are some caveats to this offer. You have to use the credit when you preorder the phone. No saving it for later. Also, the credit can’t be applied to the cost of the phone either, so you’ll have to put it towards the cost of accessories or extra services. Samsung specifically calls out that select Galaxy rings, earbuds, watches, and tablets are eligible, or you can use it to help pay for Samsung Care Plus.
There are no downsides to registering your interest, so if you think you might be interested in buying one of the upcoming phones, it’s worth filling out the form. As long as you use the same email during checkout, the credit will be automatically applied.
-
Health1 minute agoDr Oz links obesity to chronic disease surge, says GLP-1s can ‘jumpstart’ better health
-
Sports4 minutes agoPirates star pitcher makes unfortunate history after being taken out in middle of perfect game bid
-
Technology9 minutes agoMedical identity theft follows you into the doctor’s office
-
Business16 minutes agoCalifornia soccer fans sue StubHub after it fails to deliver expensive World Cup tickets
-
Entertainment19 minutes agoLucas Museum to give free annual passes to South L.A. neighbors, host community preview day
-
Lifestyle24 minutes agoMeow Wolf taps famed L.A. animation house for its new Los Angeles venue
-
Politics31 minutes ago
Column: Trump decries ‘communism’ while his government takes ownership of companies
-
Science34 minutes ago‘I’d rather my house burn down than get cancer’: Herbicide use upends California’s fight to save forests