DMS Downtime: What Dealerships Lose and How to Prepare

Executive Summary

When a dealership’s management system goes offline, every revenue-generating function stops at the same time. Sales can’t be finalized, service can’t schedule or close repair orders, and the F&I office can’t process a single deal. The June 2024 CDK Global ransomware attack, which took down systems at roughly 15,000 dealerships across North America for nearly three weeks, turned this scenario from a theoretical risk into a documented $944 million industry loss.

Why It Matters

A Dealer Management System is the operational backbone of a modern dealership. It connects sales, finance and insurance, service scheduling, parts inventory, accounting, and manufacturer reporting into a single platform. When that platform goes down, it doesn’t just slow operations. It stops them.

Most dealerships run on one of a small number of major DMS platforms: CDK Global, Reynolds and Reynolds, DealerSocket, or Tekion. That concentration creates a systemic vulnerability. When a platform-level outage hits, every dealership using it is affected simultaneously, and the recovery timeline is controlled by the vendor, not the dealer.

The June 2024 CDK Global attack made this concrete. An estimated 15,000 dealerships lost access to their DMS for up to three weeks. Anderson Economic Group estimated total industry losses at nearly $944 million. Individual dealers reported losing hundreds of thousands of dollars per day. Many had to resort entirely to pen and paper to keep any part of their operation running.

That attack didn’t just damage revenue. It damaged customer trust, disrupted manufacturer reporting timelines, and exposed the near-total operational dependency that most dealerships have on a single software platform with no backup approach in place.

How It Impacts Dealerships

The financial impact of DMS downtime runs across every department simultaneously, which is what makes it different from most IT problems.

Sales teams can’t pull vehicle inventory, generate purchase agreements, verify trade-in values, or structure deals without DMS access. Some transactions can be reconstructed manually, but most customers won’t wait. Deals fall through, and those lost opportunities rarely come back later.

The F&I office is one of the highest-margin operations in a dealership. Lender submissions, rate lookups, product presentations, and contract generation all depend on DMS connectivity. An F&I manager with no system access cannot close a deal.

Service departments use the DMS to create repair orders, pull parts from inventory, log technician time, and track warranty claims. When the system is down, technicians don’t know what’s already been started, what parts are reserved, or what the customer approved. Completed jobs may not get billed correctly, or at all.

Manufacturer reporting runs through the DMS as well. Miss a reporting window because your system is unavailable, and you may face compliance issues with your OEM. Floorplan and financing records that aren’t reconciled on time create liability with lenders.

Taken together, a multi-day DMS outage touches every part of how a dealership makes money.

What Steps Dealerships Can Take

Preparing for DMS downtime is a specific discipline, not just a general IT conversation. A few areas deserve focused attention before an outage happens.

Document your offline fallback process now. Every department should have a written procedure for what to do when the DMS is unavailable: which forms to use, where they’re stored, how to manually record deals and repair orders, and who approves what. If your team has to invent this process during an outage, you’ll lose most of the first day before anyone agrees on a direction.

Separate your DMS dependency from your core data. Your customer records, deal history, and vehicle data should be backed up independently, not stored exclusively within the DMS platform. A vendor-side outage should not mean your data is inaccessible. Know where your data lives, who controls it, and how quickly it can be recovered.

Define a recovery time objective by department. Service may be able to operate manually for a few hours. F&I cannot. Sales can write a handwritten purchase agreement, but a DMS-down deal still needs to be entered into the system when it comes back online, and the longer the outage, the more reconciliation work piles up. Knowing your recovery tolerance by department tells you exactly how long you can absorb an outage before the financial damage becomes material.

Test your fallback before an incident forces you to use it. A plan that’s never been run is a plan that will fail under pressure. Schedule a tabletop exercise at least once a year. Walk each department through an outage scenario, identify where the procedure breaks down, and fix it before a real event.

For more on how a documented recovery objective shapes your continuity posture, read: Back Online in Four Hours: Recovery Time Without a Data Center

How an MSP Helps

Most dealerships don’t have the internal IT resources to build and maintain a proper business continuity plan for DMS downtime. The operational complexity is high: multiple departments, multiple systems, manufacturer reporting obligations, and a customer-facing service environment that can’t go dark without real consequences.

An MSP with dealership experience brings both a framework and the technical infrastructure to back it up. That includes independent data backups that aren’t tied to DMS platform availability, monitoring that catches connectivity issues before they become full outages, documented fallback procedures tailored to each department, and recovery testing that actually gets done on a schedule.

The CDK Global attack also exposed a second gap: many dealerships had no established contact path for their IT environment when the crisis hit. Knowing who to call, what they have access to, and how quickly they can respond is part of continuity planning, not an afterthought you sort out during the incident.

Core Managed works with dealership groups that operate across multiple locations. The planning challenge there isn’t just one store going dark. It’s coordinating a response when the outage hits every rooftop at once, as it did in June 2024.

For more on what a formal business continuity plan covers and where most dealerships have gaps, read: Business Continuity Planning: Ensuring Your Business Can Survive Disasters

Best Practices and Key Takeaways

Keep DMS credentials documented and accessible offline. If your password manager or authentication system is also unavailable during an outage, you’ve compounded the problem. Credentials for your DMS, phone system, and internet provider need to be documented somewhere that works when nothing else does.

Maintain a working relationship with your DMS vendor before you need emergency support. Dealers who had existing support relationships during the CDK outage had a clearer line of communication about recovery timelines. Those who didn’t were waiting in the same queue as every other affected dealership.

Know your data portability options. Most DMS contracts include provisions around data export. Understand those terms before you need them, not during an incident.

Build outage communication into your plan. Customers waiting on service vehicles, buyers expecting delivery, and lenders expecting documentation need to hear from you. Having a prepared communication template for outage events means you’re managing customer expectations instead of going silent.

Treat a DMS outage like a weather event: you can’t always predict it, but you can decide in advance what you’ll do when it happens.

FAQ

What is a DMS and why is it so critical to dealership operations?

A Dealer Management System is the integrated software platform that connects sales, finance, service, parts, and accounting at a dealership. Most operational tasks, including structuring deals, creating repair orders, submitting to lenders, reporting to manufacturers, and tracking inventory, require DMS access. Because it integrates so many functions, an outage in one area cascades immediately across the others.

How long can a dealership operate without its DMS?

It depends on the department and how well the dealership has prepared. Sales and F&I are the most DMS-dependent and degrade quickly without fallback procedures in place. Service can often continue for several hours with manual repair orders if staff know the process. Without any preparation, most dealerships experience significant operational breakdown within a few hours of a full outage.

What caused the CDK Global outage in 2024, and how long did it last?

CDK Global, one of the largest DMS providers in North America, suffered a ransomware attack in June 2024 that took its systems offline for approximately two to three weeks. The attack affected an estimated 15,000 dealerships. Anderson Economic Group estimated total industry losses at nearly $944 million. CDK reportedly paid approximately $25 million to restore access.

Is DMS downtime covered by cyber insurance?

It depends on the policy and the cause of the outage. Outages caused directly by a ransomware attack on your own systems are more likely to be covered than outages caused by a vendor-side failure. The CDK incident exposed a gap in many dealership policies: coverage for third-party vendor outages, sometimes called dependent business interruption coverage, is not standard in most cyber policies. Review your policy terms before an incident, not after one.

Protecting your business starts with the right partner. Core Managed helps companies secure their data, scale efficiently, and stay compliant so you can focus on running the business. Give us a call at 888-890-2673 or contact us to schedule a conversation.

For more on how MSPs turn IT challenges into competitive advantages, read our feature in the Atlanta Business Chronicle.