Alert: Morgan & Morgan Investigates CDK Global Cybersecurity Incident

Morgan & Morgan’s industry leading data privacy attorneys are investigating CDK Global regarding its recent data breach (sometimes referred to as a data security incident). The CDK Global data breach involved sensitive personal identifiable information stored at roughly 15,000 US car dealerships which use CDK Global software to store customer data.

We are investigating, among other things, the following:

• how CDK Global acquired the sensitive information;
• whether CDK Global should have had the sensitive information;
• why CDK Global stored this sensitive information in an Internet-accessible environment;
• whether *CDK Global encrypted the sensitive information it stored in an Internet-accessible environment;
• whether CDK Global deleted sensitive information it no longer had a reasonable need to maintain in an Internet-accessible environment;
• whether CDK Global implemented appropriate and adequate security measures to protect the sensitive information it stored in an Internet-accessible environment; and
• whether CDK Global has provided affected individuals adequate protection and compensation for any harms they have experienced as a result of the data breach.

On June 18, CDK Global reported that it experienced a data breach in which sensitive personal identifiable information was accessed by an unauthorized party via the Internet. The breach reportedly happened on According to media reports, CDK Global was again attacked by cybercriminals the following day.

If you received a data breach notification from CDK Global or from a GM, Nissan or BMW car dealership, please contact us today.

We place a significant amount of trust in the companies we choose to share our information with, making the actions of CDK Global all the more unacceptable. If you suspect that your information was exposed in CDK Global data breach, Morgan & Morgan is here to help.