CDK Global outage caused by BlackSuit ransomware attack

The report details an active BlackSuit ransomware attack against CDK Global that forced shutdowns of CDK's SaaS systems and data centers, disrupting thousands of North American car dealerships; CDK is reportedly negotiating with the attackers for a decryptor to prevent data leaks while threat actors have been impersonating support to gain access. The piece also contextualizes BlackSuit as a rebrand/successor of Royal/Conti and notes significant operational impact, ongoing investigations, and confirmed downstream effects on major dealership groups.