What is the official website of CDK Global ?

The official website of CDK Global is http://www.cdkglobal.com/.

What is CDK Global's cybersecurity risk score?

CDK Global has an AI-generated cybersecurity risk score of 735 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has CDK Global experienced?

According to Rankiteo, CDK Global currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CDK Global been affected by any supply chain cyber incidents ?

According to Rankiteo, CDK Global has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CDK Global have SOC 2 Type 1 certification ?

According to Rankiteo, CDK Global is not certified under SOC 2 Type 1.

Does CDK Global have SOC 2 Type 2 certification ?

According to Rankiteo, CDK Global does not hold a SOC 2 Type 2 certification.

Does CDK Global comply with GDPR ?

According to Rankiteo, CDK Global is not listed as GDPR compliant.

Does CDK Global have PCI DSS certification ?

According to Rankiteo, CDK Global does not currently maintain PCI DSS compliance.

Does CDK Global comply with HIPAA ?

According to Rankiteo, CDK Global is not compliant with HIPAA regulations.

Does CDK Global have ISO 27001 certification ?

According to Rankiteo,CDK Global is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CDK Global operate in ?

CDK Global operates primarily in the Software Development industry.

How many employees does CDK Global have ?

CDK Global employs approximately 8,285 people worldwide.

Does CDK Global own any subsidiaries ?

CDK Global presently has no subsidiaries across any sectors.

How many LinkedIn followers does CDK Global have ?

CDK Global's official LinkedIn profile has approximately 151,834 followers.

What is the NAICS classification code for CDK Global ?

CDK Global is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does CDK Global have a Crunchbase profile ?

No, CDK Global does not have a profile on Crunchbase.

Does CDK Global have a LinkedIn profile ?

Yes, CDK Global maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cdknorthamerica.

How many cybersecurity incidents has CDK Global experienced ?

As of September 15, 2026, Rankiteo reports that CDK Global has experienced 1 cybersecurity incidents.

How many peer or competitor companies does CDK Global have ?

CDK Global has an estimated 30,923 peer or competitor companies worldwide.

What types of cybersecurity incidents has CDK Global faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CDK Global

Boost Score +25 with badge (5 left)

735

/1000

Moderate

760

/1000

Fair

CDK Global Vendor Cyber Rating & Cyber Score

cdkglobal.com

Add Your Compliance Badge

CDK Global is a leading provider of retail technology and software as a service (SaaS) solutions that help dealers and auto manufacturers run their businesses more efficiently, drive improved profitability and create frictionless purchasing and ownership experiences for consumers. Today, CDK serves nearly 15,000 retail locations in North America.

CDK Global

CDK Global CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

CDK Global

Breach

6/2024

CDK047072825

Loading…

A.I.

CDK Global Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CDK Global

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for CDK Global in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CDK Global in 2026.

Incident Types CDK Global vs Software Development Industry Avg (This Year)

No incidents recorded for CDK Global in 2026.

Incident History - CDK Global (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CDK Global Subsidiaries

CDK Global

Software Development

Website: http://www.cdkglobal.com/

Company Size: 5,001-10,000 employees

CDK Global Heavy TruckSoftware Development

Lightspeed DMSSoftware Development

IntelliDealerSoftware Development

Fortellis Automotive Commerce ExchangeMotor Vehicle Manufacturing

Loading…

CDK Global Similar Companies

[24]7.ai

cb 247.ai

[24]7.ai™ customer engagement solutions use conversational artificial intelligence to understand customer intent, enabling companies to create personalized, predictive, and effortless customer experiences across all channels; attract and retain customers; boost agent productivity and satisfaction; and drive revenues while lowering costs. The world’s largest and most recognizable brands use [24]7.ai intent-driven technologies to serve several hundred million visitors through billions of conversations annually, most of which are automated. The result is an order of magnitude improvement in digital adoption, customer satisfaction, and revenue growth. For more information, visit: www.247.ai. [24]7.ai is based in Campbell, California. [24]7.ai is a registered trademark of 24/7 Customer, Inc.

Grab

grab.careers

Grab is Southeast Asia’s leading superapp, offering a suite of services consisting of deliveries, mobility, financial services, enterprise and others. Grabbers come from all over the world, and we are united by a common mission: to drive Southeast Asia forward by creating economic empowerment for everyone. At Grab, every Grabber is guided by The Grab Way, which explains our mission and the operating principles on how we can achieve it together. We call these principles the 4Hs: Heart We work together as OneGrab to serve communities in Southeast Asia Hunger We work to understand ground truths and drive improvements, big and small Honour We keep our word and steward our resources wisely to build and sustain trust Humility We are a constant work-in-progress, and we never stop learning to get better

Bosch

cb bosch.com

The Bosch Group is a leading global supplier of technology and services. It employs roughly 417,900 associates worldwide (as of December 31, 2024). According to preliminary figures, the company generated sales of 90.5 billion euros in 2024. Its operations are divided into four business sectors: Mobility, Industrial Technology, Consumer Goods, and Energy and Building Technology. With its business activities, the company aims to use technology to help shape universal trends such as automation, electrification, digitalization, connectivity, and an orientation to sustainability. In this context, Bosch’s broad diversification across regions and industries strengthens its innovativeness and robustness. Bosch uses its proven expertise in sensor technology, software, and services to offer customers cross-domain solutions from a single source. It also applies its expertise in connectivity and artificial intelligence in order to develop and manufacture user-friendly, sustainable products. With technology that is “Invented for life,” Bosch wants to help improve quality of life and conserve natural resources. The Bosch Group comprises Robert Bosch GmbH and its roughly 470 subsidiary and regional companies in over 60 countries. Including sales and service partners, Bosch’s global manufacturing, engineering, and sales network covers nearly every country in the world. Bosch’s innovative strength is key to the company’s further development. At 136 locations across the globe, Bosch employs some 86,900 associates in research and development, of which nearly 48,000 are software engineers. Instagram: https://www.instagram.com/boschglobal/ Facebook: https://www.facebook.com/BoschGlobal Glassdoor: https://bit.ly/3raTZnH Imprint: www.bosch.com/corporate-information Privacy statement: https://www.bosch.com/data-protection-notice-bosch-linkedin/

Wolt

wolt.com

Wolt is a Helsinki-based technology company with a mission to bring joy, simplicity and earnings to the neighborhoods of the world. Wolt develops a local commerce platform that connects people looking to order food, groceries, and other goods with people interested in selling and delivering them. Wolt was founded in 2014 and joined forces with DoorDash (NASDAQ: DASH) in 2022. Together, we operate in more than 30 countries today.

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first- and third-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on four continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and Cox Fleet®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately owned, Atlanta-based company with $23 billion in annual revenue. Cox Automotive has been included on Glassdoor’s Best Companies in Tech & AI 2026 and Best Place to Work in 2026 lists.

Trimble Inc.

trimble.com

Trimble is a global technology company that connects the physical and digital worlds, transforming the ways work gets done. With relentless innovation in precise positioning, modeling and data analytics, Trimble enables essential industries including construction, geospatial and transportation. Whether it's helping customers build and maintain infrastructure, design and construct buildings, optimize global supply chains or map the world, Trimble is at the forefront, driving productivity and progress. For more information about Trimble (Nasdaq: TRMB), visit: www.trimble.com.

Zoho

zoho.com

Zoho offers beautifully smart software to help you grow your business. With over 100 million users worldwide, Zoho's 55+ products aid your sales and marketing, support and collaboration, finance, and recruitment needs—letting you focus only on your business. Zoho respects user privacy and does not have an ad-revenue model in any part of its business, including its free products. Zoho Corporation is privately held and profitable, with its headquarters in Chennai, India, and offices across the globe.

Lazada

lazada.com

About Lazada Group Founded in 2012, Lazada Group is the leading eCommerce platform in Southeast Asia. We are accelerating progress in Indonesia, Malaysia, the Philippines, Singapore, Thailand and Vietnam through commerce and technology. With the largest logistics and payments networks in the region, Lazada is a part of our consumers’ daily lives in the region and we aim to serve 300 million shoppers by 2030. Since 2016, Lazada is the Southeast Asia flagship platform of the Alibaba Group powered by its cutting-edge technology infrastructure.

CDK Global CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 19, 2026 03:53 PM

Every industry has a CDK Global

COMMENTARY: Two years ago I had never heard of CDK Global. They were a small, niche software provider, but they happen to power most of the...

Read Article

November 17, 2025 08:00 AM

Cybersecurity at the Dealership in 2025: Closing the Confidence Gap in a High-Risk Landscape

Cyberattack Trends: One in five dealerships reported being targeted in 2025, with phishing and ransomware remaining top threats. Employee...

Read Article

October 15, 2025 07:00 AM

Dealer software firms boost cyber defenses after CDK hack shakes industry

About 1200 Canadian dealerships were affected by the CDK cyberattack.

Read Article

June 26, 2025 07:00 AM

In our opinion: A year after CDK cyberattacks, some dealers haven’t learned their lesson

It's been one year since cybersecurity attacks on CDK Global crippled retailers, but some dealers still aren't putting enough effort into...

Read Article

June 19, 2025 07:00 AM

One year after CDK cyberattacks, no consensus on lessons learned

On June 19, 2024, the CDK Global cyberattacks created turmoil for thousands of dealerships across North America. One year later, there is no...

Read Article

June 17, 2025 07:00 AM

Third-party cyber attacks put spotlight on contingent business interruption coverage

A string of high-profile cyber attacks involving third-party software vendors last year has forced organizations to take a hard look at their contingent...

Read Article

May 15, 2025 07:00 AM

4 crucial lessons learned from the CDK cyber attack

Let us take a look at the four important lessons learnt from the ransomware attack on the third-party service provider, CDK Global LLC.

Read Article

March 08, 2025 05:02 AM

Hackers are Increasingly Targeting Auto Dealers

In late June, more than 15,000 car dealerships across North America were affected by a cyberattack on CDK Global, which provides software to car dealers.

Read Article

January 14, 2025 08:00 AM

Will dealerships heed the lessons learned from 2024 cyberattacks?

Long before two cyberattacks struck CDK Global over the summer, Joe Shaker implemented multiple safeguards to help minimize and manage his...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-91201

SUMMARY

DocsGPT through 0.20.0 posts OAuth connector session tokens to a wildcard target origin in the callback-status endpoint without validating sender origin. Attackers can obtain session tokens and provider account emails by acting as window.opener during OAuth authorization, then use tokens to disconnect victims' cloud storage connectors.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-91200

SUMMARY

DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry names from the in-pod sync stream. Attackers operating a malicious container can stream tar entries with traversal sequences to write arbitrary files on the developer workstation, enabling code execution.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-91199

SUMMARY

Refly through 1.1.0 contains a server-side request forgery vulnerability in the POST /v1/misc/scrape endpoint that fetches caller-supplied URLs without validating the scheme, host, or resolved address. Authenticated attackers can make the backend issue requests to loopback, private, and link-local addresses including cloud metadata services to read page titles and descriptions of internal resources.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5)

cvss3

Base Score: 5.0

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.1

REFERENCES

CVE-2026-91198

SUMMARY

GrowthBook through 5.0.1 returns unredacted fact table definitions including raw warehouse SQL in payloads served by unauthenticated public report and experiment endpoints. Attackers with knowledge of a publicly shared report or experiment identifier can read internal data warehouse query text, schema, table names, filter values and datasource identifiers.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-91197

SUMMARY

Flowable flowable-engine through 8.0.0 contains an XML external entity injection vulnerability in ProcessDiagramLayoutFactory.parseXml() that fails to disable external entity resolution when parsing deployed BPMN resources. Attackers with process deployment privileges can embed DOCTYPE declarations with external entities in BPMN files to read arbitrary local files or trigger requests to internal network endpoints when diagram layout is computed.

Published

Date2026-09-14

Updated

Date2026-09-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

CDK Global Vendor Cyber Rating & Cyber Score

CDK Global A.I CyberSecurity Scoring

CDK Global CyberSecurity News & History

CDK Global Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CDK Global

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CDK Global vs Software Development Industry Avg (This Year)

Incident History - CDK Global (X = Date, Y = Severity)

CDK Global Subsidiaries

CDK Global

CDK Global Similar Companies

[24]7.ai

Grab

Bosch

Wolt

Cox Automotive Inc.

Trimble Inc.

Zoho

Lazada

Meta

CDK Global CyberSecurity News

Every industry has a CDK Global

Cybersecurity at the Dealership in 2025: Closing the Confidence Gap in a High-Risk Landscape

Dealer software firms boost cyber defenses after CDK hack shakes industry

In our opinion: A year after CDK cyberattacks, some dealers haven’t learned their lesson

One year after CDK cyberattacks, no consensus on lessons learned

Third-party cyber attacks put spotlight on contingent business interruption coverage

4 crucial lessons learned from the CDK cyber attack

Hackers are Increasingly Targeting Auto Dealers

Will dealerships heed the lessons learned from 2024 cyberattacks?

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

CDK Global CyberSecurity News & History

CDK Global Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for CDK Global

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types CDK Global vs Software Development Industry Avg (This Year)

Incident History - CDK Global (X = Date, Y = Severity)

CDK Global Subsidiaries

CDK Global

CDK Global Similar Companies

[24]7.ai

Grab

Bosch

Wolt

Cox Automotive Inc.

Trimble Inc.

Zoho

Lazada

Meta

CDK Global CyberSecurity News

Every industry has a CDK Global

Cybersecurity at the Dealership in 2025: Closing the Confidence Gap in a High-Risk Landscape

Dealer software firms boost cyber defenses after CDK hack shakes industry

In our opinion: A year after CDK cyberattacks, some dealers haven’t learned their lesson

One year after CDK cyberattacks, no consensus on lessons learned

Third-party cyber attacks put spotlight on contingent business interruption coverage

4 crucial lessons learned from the CDK cyber attack

Hackers are Increasingly Targeting Auto Dealers

Will dealerships heed the lessons learned from 2024 cyberattacks?

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo