Ransomware attacks on automotive targets are up again in 2026. CDK was two years ago and dealers who went through it said it was the worst operational experience of their careers. Two years later most of the small and mid-size stores I know are still running the same level of cybersecurity they had before it happened.
The attackers know this. Dealerships are high-value targets because you hold customer financial data, you run DMS systems with inconsistent patch cycles, and your staff turnover means security training is perpetually behind. That is not a guess. That is why the attacks keep coming.