The BlackSuit ransomware gang orchestrated a massive IT outage at CDK Global, impacting car dealerships throughout North America. Sources confirmed the attack was carried out by BlackSuit, with CDK currently negotiating with the threat actors for a decryptor and to prevent stolen data leaks. The ransomware attack forced CDK to shut down its IT systems and data centers, causing disruptions in car dealership operations. This led to dealerships resorting to manual processes, affecting sales, inventory, and service functions. Major dealership companies like Penske Automotive Group and Sonic Automotive also suffered from the outages. CDK warns that threat actors are posing as their agents to gain unauthorized access to dealership systems. BlackSuit is believed to be a rebrand of the Royal ransomware operation, linked to attacks on hundreds of organizations worldwide with millions in ransom demands.