When your DMS goes down, sales, F&I, service, and parts stop at once — a dealership DMS outage takes the whole store offline. The June 2024 CDK outage idled roughly 15,000 dealerships for about two weeks, an estimated $1.02 billion in dealer losses. You can’t prevent a vendor’s outage, but you can prepare to keep operating.
Why does one vendor’s outage stop the whole dealership?
A modern dealership runs almost every department through one platform. The DMS is the deal desk, the F&I office, the repair-order system, the parts counter, and the accounting ledger — and at many stores it also carries the phones, the internet routing, or both. That consolidation is efficient on a normal Tuesday. It is also a single point of failure by design: when the DMS is dark, there is no fallback system waiting to take over, because everything was the DMS.
So a dealership DMS outage isn’t one department losing a tool. Sales can’t structure a deal or pull a payoff. F&I can’t submit to lenders. Service can’t open or close a repair order, and parts can’t look up availability or pricing. Accounting can’t post. The store is open, the customers are on the lot, and every system that turns a visit into revenue is unavailable at the same moment.
What did the 2024 CDK outage actually teach the industry?
In June 2024, CDK Global — one of the two dominant DMS providers, with roughly half the U.S. franchised-dealer market — was hit by a cyberattack and taken offline. The verified public timeline is the lesson:
- The attack was detected June 18, 2024, with a second attack on June 19 that took down systems CDK had begun restoring.
- Most systems didn’t come back until July 4–5 — roughly two weeks dark.
- The incident was attributed to the BlackSuit ransomware group; CNN reported a ransom of ~387 BTC (about $25 million) was paid around June 21.
- About 15,000 dealer locations — roughly half of all U.S. franchised dealers — were affected.
- The Anderson Economic Group estimated ~$1.02 billion in direct dealer losses over three weeks.
Here’s the uncomfortable takeaway, and it’s the reason we write about this: the outage had nothing to do with any individual dealership’s security posture. The stores that went dark weren’t careless. Their DMS vendor’s infrastructure was compromised in a ransomware attack, and the dealers were simply downstream of it. You can run flawless internal security and still lose two weeks because a platform you don’t control got hit. Your own posture protects you from your incidents; it does nothing about vendor-concentration risk. That risk is only addressed by being ready to operate without the vendor.
Could your dealership keep operating without its DMS tomorrow?
This is the honest test most stores fail, and it takes about five minutes to run. Imagine the DMS is unreachable when you open tomorrow — no login, no help-desk ETA, just gone. Now answer plainly:
- Can service write and track repair orders on paper, and re-key them later without losing a single ticket?
- Does anyone have a current inventory list with VINs and pricing that isn’t inside the DMS?
- Can parts confirm what’s on the shelf without the system?
- Do your phones and internet survive if the outage takes the DMS-hosted services with it?
- Does someone own the plan — or does everyone stand around waiting for a fix nobody controls?
Most single-rooftop and even multi-store groups answer “no” to most of these. That’s not a failure of effort; nobody plans for the platform that runs everything to simply vanish. But the CDK stores that kept selling and servicing were the ones that could fall back to paper and re-enter later — and that capability is built before the outage, never during it. For groups running several rooftops, the answer also depends on how consistent your stores are; standardizing IT across multiple locations is what lets one continuity plan actually work at every rooftop instead of five improvised versions.
What belongs in a dealership DMS outage continuity kit?
A continuity kit isn’t software you buy — it’s a small set of exports, forms, and decisions kept current so a dealership DMS outage becomes an inconvenience instead of a shutdown. This is what we help dealers assemble and keep fresh.
- Printed manual forms for deals, repair orders, and parts tickets — already stocked at each department, so staff aren’t inventing a paper process mid-outage.
- Scheduled exports that live outside the DMS: inventory with VINs and pricing, the customer list, the appointment book, and a periodic accounting snapshot — so the day’s numbers don’t vanish with the platform.
- Alternate communications — a phone and internet path that does not depend on your DMS vendor, so a service outage doesn’t also silence the store. This is where a resilient underlying network earns its keep; it’s part of what our infrastructure management services exist to protect.
- A paper-to-system re-entry plan — a defined way to reconcile every handwritten deal, RO, and parts ticket back into the DMS when it returns, so nothing is lost or double-posted in the catch-up.
- A rehearsal cadence — a short, scheduled drill where a department actually runs an hour on the fallback. A kit no one has ever used is a theory, not a plan.
Notice the pattern: the whole kit is about keeping your own copy of your own data and a way to work without the platform. Exporting inventory weekly and daily is disciplined backup practice applied to operations — and if the difference between a backup, disaster recovery, and true business continuity is fuzzy, our explainer on backup vs. disaster recovery vs. business continuity draws the lines.
What should your vendor contract say about an outage?
Read the DMS agreement before you need it — not at hour one of a dealership DMS outage. The terms decide what you’re actually owed when the platform is down, and most dealers have never checked. Look for:
- A named escalation path — who you call, and who they escalate to, when the normal help desk can’t help.
- Contractual incident-notification timelines — how fast the vendor must tell you an incident occurred, and what they must tell you.
- Status-communication commitments during an outage, so you’re not refreshing a status page for two weeks.
- Data-export rights — your explicit right to get your own data out, in a usable format, on a schedule you control. This is the clause that makes the continuity kit above legally and practically possible.
If your store handles customer financial information — and every F&I office does — the same vendor-oversight thinking overlaps with regulatory duty. The FTC Safeguards Rule for car dealerships already requires you to oversee your service providers’ security; reviewing outage and data-export terms is a natural extension of the vendor due diligence you’re supposed to be doing anyway.
What does an MSP own vs. what does the DMS vendor own?
The honest division of labor matters here, because it’s easy to sell a dealer the impression that the right IT partner can keep the DMS up. No one can. Here’s who actually owns what.
| What has to happen | Who owns it |
|---|---|
| The DMS platform, its uptime, and its own security | The DMS vendor |
| Restoring the platform after an incident | The DMS vendor |
| The vendor SLA and incident notifications | The DMS vendor |
| Continuity planning and the paper fallback | QOS MSP, with you |
| Monitoring and alerting on your connection to the DMS | QOS MSP |
| Alternate connectivity that doesn’t depend on the DMS vendor | QOS MSP |
| Scheduled data exports and backup discipline | QOS MSP |
| Escalation support during the outage | QOS MSP |
| Rehearsals and tabletop drills | QOS MSP runs them |
| The decision to actually rehearse before an event | The dealership |
The honest line: QOS MSP cannot prevent or fix your DMS vendor’s outage. We don’t control the platform, we can’t secure it, and we can’t restore it — that’s the vendor’s infrastructure, full stop. What we own is everything on your side of the line: preparing the store to operate, monitoring the connection, keeping your data exported, standing up alternate communications, and running the drills. Anyone telling you they’ll keep your DMS from going down is selling you something they can’t deliver.
Frequently asked questions
How long did the CDK outage last?
About two weeks. The first attack was detected on June 18, 2024, a second attack hit June 19, and most systems were not restored until around July 4, 2024. Roughly 15,000 dealer locations were affected and dealer losses were estimated near 1.02 billion dollars.
Can a dealership prevent a DMS outage?
No. The DMS runs on the vendor’s infrastructure, so an outage there is outside any single dealership’s control, no matter how strong your own security is. What you can control is preparation: scheduled data exports, paper fallback forms, alternate communications, and a rehearsed plan so the store keeps operating while the vendor restores the platform.
What data should a dealership export from its DMS, and how often?
Export inventory with VINs and pricing, open repair orders, the appointment book, customer contacts, parts counts, and an accounting snapshot. Weekly is the minimum for most of it, and inventory should be exported daily because it changes fastest. Keep those exports outside the DMS so they survive an outage of the platform itself.
Does cyber insurance cover losses from a vendor’s outage?
Sometimes. Contingent business interruption coverage can apply to losses caused by a vendor or supplier outage, but it is highly policy dependent and often has waiting periods and sublimits. Verify your coverage with your broker before an event rather than after, and treat this as general information, not insurance advice.
Is a DMS outage a disaster recovery event?
Not in the classic sense. Disaster recovery restores your own systems after they fail, but in a DMS outage your systems are fine and your operations are dead because the platform you depend on is down. That is a business continuity problem, which needs its own plan focused on operating without the vendor. Our explainer on backup vs. disaster recovery vs. business continuity covers the distinction.
How we prepare dealerships for the next vendor outage
A dealership DMS outage is the one incident you can’t prevent but can fully prepare for — and that preparation is our lane. We’ll say the boundary plainly: we can’t stop your DMS vendor from going dark, and we won’t pretend to. What we do is make the outage survivable. We build and maintain the continuity kit — scheduled exports of your inventory, customers, appointments, and accounting; paper fallback forms staged at each department; alternate communications that don’t ride on the DMS; and a re-entry plan for when it comes back. We monitor the connection and alert on trouble, and we run the drills so the plan is muscle memory, not a binder. Day to day, that’s our security administration and infrastructure management services doing their normal job.
When you don’t need us: if you already export your critical data on a schedule, keep it off the DMS, have printed fallback forms your staff have actually used, and have rehearsed re-entry — you’ve done the important work, and a partner is optional. The continuity kit matters more than who assembles it. The dealers who got hurt in 2024 weren’t the ones without a fancy tool; they were the ones with no copy of their data and no way to work without the platform.
If you’d rather have the exports, the fallback, and the rehearsals handled — and know your store can keep selling and servicing through the next dealership DMS outage instead of standing still for two weeks — talk to us before the outage, not during it.
