Auto Dealership Ransomware

This article warns that auto dealerships are increasingly targeted by ransomware and related cyber-crime due to stored PII/financial data, limited cybersecurity investment, insufficient employee security training, and high reputational risk; it summarizes the FTC Safeguards Rule update requiring a designated security lead, risk-based information security architecture, access controls, encryption, multi-factor authentication, log monitoring, annual penetration testing, and compliance reporting, and urges dealerships to implement these controls before the December 9, 2022 compliance deadline.