CDK Global: The 800-Pound Gorilla of Dealership Technology, Post-Ransomware

Executive Overview

If you run a dealership in North America, you've touched CDK Global's technology whether you know it or not. Nearly 15,000 dealer locations across the continent process somewhere in the neighborhood of $540 billion in auto commerce annually through CDK's systems. That's not hyperbole -- that's the number CDK publishes itself, and it puts the company in a category of its own when it comes to sheer market footprint in automotive retail technology.

CDK Global is what happens when you take the Dealer Services division of a Fortune 500 payroll and HR giant (ADP), spin it off into its own publicly traded company, let it run for eight years, and then take it private in an $8.3 billion acquisition by Brookfield Business Partners. The result is a company that powers the operational backbone of more dealerships than any competitor, yet has spent the last several years fighting antitrust lawsuits, recovering from a crippling ransomware attack, and trying to modernize a product portfolio that still runs, in part, on green-screen-era architecture.

This matters to you as a dealer principal, GM, or marketing director because CDK is likely already in your dealership -- or your next dealership software decision will involve them. Understanding what CDK actually does, where it's strong, where it's vulnerable, and what the 2024 ransomware attack means for your data security and operational resilience is no longer optional. It's table stakes.

To understand the full picture of CDK, you need to look at four dimensions: the company's history and how it accumulated its market power, the breadth and depth of its product ecosystem, the events that have tested its relationship with the dealer community (especially the June 2024 ransomware attack), and the competitive dynamics that are reshaping the dealership technology market. This article covers all four, with the goal of giving you the context you need to make informed decisions about one of the most consequential vendor relationships your dealership will ever have.

The Origin Story: From ADP to Brookfield

The ADP Years (1973-2014)

CDK's roots trace back to 1973, when Automatic Data Processing (ADP) -- yes, the payroll company -- acquired two small dealership software firms: National Inventory Control System (NICS) in Portland, Oregon, and Computer System Inc. (CSI) in Cincinnati, Ohio. These acquisitions gave ADP a foothold in a business that, at the time, was still run largely on paper ledgers and carbon-copy forms.

Over the next 41 years, ADP Dealer Services grew through more than 30 acquisitions, stitching together a patchwork of dealership management systems, CRM tools, and digital marketing capabilities. Key acquisitions along the way included BZ Results (2006), Cobalt Digital Marketing, and Kerridge Computer Company (2005), a UK-based DMS supplier. That last one is important: the "K" in "CDK" comes from Kerridge. The "C" comes from Cobalt, and the "D" comes from the original ADP Dealer Services business.

The Spin-Off (2014)

On October 1, 2014, ADP spun off its Dealer Services division into an independent, publicly traded company called CDK Global. The spin-off was structured as a tax-free distribution to ADP shareholders, and CDK began trading on the Nasdaq under the ticker CDK. The rationale was straightforward: ADP wanted to focus on its core HR and payroll business, and the Dealer Services division -- with its unique automotive industry dynamics -- deserved its own strategic focus.

For the next eight years, CDK operated as a public company with all the pressures that entails: quarterly earnings calls, shareholder expectations, and a constant push for growth at scale. The company expanded its product portfolio, built out its digital retailing capabilities, and deepened its relationships with OEMs.

The Attempted Auto/Mate Acquisition (2017-2018)

One of the most revealing episodes in CDK's recent history came in 2017, when the company announced its intention to acquire Auto/Mate Dealership Systems, a smaller DMS provider popular in the mid-market. The deal would have eliminated a direct competitor and consolidated CDK's already-dominant market position.

The Federal Trade Commission sued to block the acquisition in March 2018, arguing that it would "reduce competition in an already concentrated market." The FTC won. CDK abandoned the deal. The episode signaled that regulators were watching CDK's market power closely -- a theme that would resurface repeatedly in the years to come.

Sale of International Operations (2020)

In 2020, CDK sold its international operations to Francisco Partners for an undisclosed sum. That business, renamed Keyloop, continues to serve dealerships in Europe and other markets. The sale was part of a strategic refocus: CDK decided to go all-in on North America, the largest and most profitable automotive retail market in the world.

The Brookfield Take-Private (2022)

On April 7, 2022, CDK Global agreed to be acquired by Brookfield Business Partners, a private equity firm, along with institutional partners, for a total enterprise value of $8.3 billion. The deal valued CDK at $54.87 per share, a 30% premium over the stock's trading price. Brookfield completed the acquisition on July 6, 2022.

The take-private removed CDK from the glare of public markets -- no more quarterly earnings reports, no more activist investors. But it also loaded the company with debt and gave Brookfield a clear mandate: grow the business, improve margins, and eventually exit at a profit. That pressure has shaped nearly every major decision CDK has made since.

Product Ecosystem: The Full Stack

CDK's product lineup is broad, deep, and occasionally bewildering. Here's the current structure as of 2026.

The Dealership Xperience Platform (DXP)

This is CDK's umbrella architecture and the centerpiece of its current go-to-market strategy. The Dealership Xperience Platform is described as "an open, integrated, and customer-focused platform" that connects all of CDK's product suites. In practice, it's CDK's answer to the criticism that its products don't talk to each other well -- a knock that's been leveled at the company for years, particularly in the context of antitrust litigation where third-party integrators alleged that CDK deliberately blocked data integration.

The platform is modular, meaning dealers can adopt individual suites without committing to the full stack. But CDK's commercial incentives clearly push toward the full stack. The more suites a dealer runs, the stickier the relationship becomes.

Foundations Suite

This is CDK's full-enterprise product for multi-site dealer groups. It promises "strengthened workflows in every department with one complete solution." It targets dealerships running multiple rooftops under a single ownership group and includes DMS, CRM, F&I, and fixed operations capabilities in a single package.

Fundamentals Suite

A lighter version of Foundations, the Fundamentals Suite is explicitly positioned for "one-to-two-site dealers." It offers a "proven and scalable core system" at what CDK describes as a more accessible price point. This suite is CDK's answer to competitors like Tekion and Dealertrack who have been eating into the small-to-mid-market dealer segment.

Modern Retail Suite

This is CDK's digital retailing product, designed to "surpass consumer expectations by making the buying journey easier." It covers the online-to-in-store purchasing experience, including digital deal jackets, online credit applications, trade-in valuation, and F&I product presentation. Modern Retail is CDK's answer to the shift toward omnichannel car buying that accelerated during the pandemic.

Fixed Operations Suite

Arguably the most profitable part of any dealership, and CDK has built a dedicated suite around it. The Fixed Operations Suite aims to "build loyalty and efficiency to maximize your Parts and Service income." It includes service scheduling, digital vehicle inspections, parts inventory management, and customer communication tools. CDK's own content highlights that independent repair shops are gaining share -- their Service Shopper 5.0 study showed independents gained six percentage points -- and the Fixed Operations Suite is designed to help dealers fight back.

Vehicle Inventory Suite

This is CDK's AI-powered inventory management tool. It covers appraisal, pricing, and merchandising. CDK's customer story for Garlyn Shelton Auto Group (Temple, TX) claims the Vehicle Inventory Suite accelerated inventory turn by 5-10 days. The suite uses AI to help dealers price vehicles more profitably and elevate merchandising.

Intelligence Suite

CDK's analytics and business intelligence offering. It promises "advanced analytics, AI, and machine learning" to help dealers fine-tune performance. The Intelligence Suite includes KPI dashboards, real-time reporting, and predictive analytics. In a market where dealers are drowning in data but starved for insight, this is a growth area for CDK.

Fortellis: The Open API Gambit

No discussion of CDK's product ecosystem is complete without addressing Fortellis, CDK's open API marketplace. Launched in 2017, Fortellis was positioned as CDK's answer to the criticism that it locked down data and blocked third-party integration. The platform was supposed to be an app marketplace for automotive retail -- similar to Salesforce's AppExchange -- where independent developers could build applications that integrate with CDK's systems.

The reality has been more complicated. While Fortellis does provide API access to CDK systems, adoption among third-party developers has been slower than CDK initially projected. Some of that is strategic: CDK controls which APIs are available, what data they expose, and at what price. Critics argue that Fortellis gives the appearance of openness without the substance, and that CDK uses it as a tool to control -- rather than enable -- third-party integration.

That said, Fortellis represents a genuine architectural improvement over CDK's pre-2017 approach, which was essentially a closed system. The platform supports standard REST APIs and OAuth 2.0 authentication, making it technically feasible for developers to integrate. The question is whether CDK's commercial terms make it economically viable.

CDK CRM: What You Need to Know

CDK's CRM is the most widely deployed CRM in franchised automotive retail, by virtue of being bundled with the CDK DMS. It covers the standard CRM functions: lead management from third-party sources (Autotrader, Cars.com, KBB, etc.), email and text automation, customer segmentation, and loyalty program management. The system's tight integration with the DMS means that customer purchase history, service history, and vehicle data are available without manual data entry.

Where CDK's CRM falls short is in marketing sophistication compared to dedicated marketing platforms, and in the user experience compared to newer entrants. Dealers who want advanced attribution, multi-touch marketing automation, or modern UX design often supplement CDK CRM with products from vendors like ActiveEngagement, AutoLeadStar, or dealership-specific marketing platforms.

CDK Digital Retailing

CDK's Digital Retailing product covers the online portion of the car-buying journey: vehicle search and configuration, credit application, trade-in appraisal, payment calculation, and deal structuring. The system is designed to hand off the customer from the online experience to the in-store experience without requiring the customer to re-enter information -- a feature that CDK calls "one seamless experience."

The digital retailing space has become intensely competitive. CDK competes here against Dealertrack's Digital Retailing, Tekion's D2C (Direct to Consumer), Roadster (owned by Cox), and a host of startups. CDK's advantage is integration with its own DMS -- when a deal is structured in Digital Retailing, it flows directly into the DMS deal jacket. The disadvantage is that Digital Retailing is less mature than some dedicated competitors.

CDK F&I Suite

CDK's F&I products cover the full F&I workflow: menu selling, product presentation (warranties, GAP, credit insurance, etc.), compliance documentation, lender rate structure management, e-contracting, and desking. The F&I suite is one of CDK's strongest product lines, partly because F&I is one of the most profitable departments in any dealership and partly because the F&I workflow benefits enormously from DMS integration.

CDK's F&I tools compete with Dealertrack F&I, Reynolds F&I, and a variety of independent F&I software vendors. The key differentiator for CDK is the depth of integration: CDK F&I users don't need to re-key deal data from the DMS into the F&I system, which reduces errors and speeds up the F&I process.

Core Product Lines

Beyond the suites, CDK organizes its offerings into nine product lines:

Dealer Management System (DMS) -- The crown jewel. CDK Drive is their flagship DMS, handling accounting, payroll, sales reporting, parts inventory, service management, and manufacturer communications. This is the system that was crippled by the 2024 ransomware attack.

Digital Retail -- Online vehicle browsing, credit applications, trade-in appraisal, deal structuring. Connects the online shopping experience to the in-store DMS.

Customer Relationship Management (CRM) -- Lead management, customer segmentation, marketing automation, and loyalty program management. CDK's CRM competes directly with offerings from Reynolds, Dealertrack, and Salesforce Automotive Cloud.

Finance & Insurance (F&I) -- Menu selling, product presentation, compliance documentation, lender connections, and e-contracting. F&I remains one of the highest-margin areas for dealers, and CDK's F&I tools are deeply integrated with its DMS.

Fixed Operations -- Service scheduling, digital inspections, parts ordering, customer communications, and loyalty programs.

Network & Communication Services -- Infrastructure services including data backup, managed IT, network monitoring, and cybersecurity. This product line has received heavy investment since the 2024 ransomware attack.

Intelligence -- Analytics, KPI dashboards, market intelligence, and AI-driven insights.

Payment Solutions -- Digital payment processing for both front-end (vehicle sales) and back-end (service/R.O.) transactions.

Dealership Xperience Platform -- The integration layer that ties all of the above together.

The Cybersecurity Incident: What Happened and Why It Still Matters

If you're a dealer reading this, you already know about the 2024 ransomware attack. You lived through it, or your colleagues did. But here are the facts, because the details matter for your future risk assessments.

The Timeline

June 19, 2024 (Day 1): CDK detected a ransomware attack early in the morning. The company proactively shut down its DMS, CRM, and Digital Retailing systems -- essentially its entire core product suite -- to contain the breach. Thousands of dealerships across the US and Canada lost access to their core operating systems. Deals that were in progress froze. Service appointments vanished from schedules. Parts orders couldn't be placed. Some dealers resorted to paper forms and manual processes for the first time in decades.

June 19-21: An Eastern European and Russian hacker group, identified by cybersecurity researchers as BlackSuit, claimed responsibility. BlackSuit is a known ransomware-as-a-service group with ties to the Russia-based Conti syndicate. The group demanded what was at the time described as "tens of millions of dollars."

June 21: CDK paid a $25 million ransom in Bitcoin to a cryptocurrency account connected to BlackSuit. This was one of the largest known ransom payments at the time. The payment was made, according to CDK's public statements, to "restore systems as quickly as possible and minimize disruption to dealers."

June 23: CDK began the process of restoring services. The company warned that the restoration would not be completed by June 30.

June 24: A second wave of disruptions hit as CDK discovered that BlackSuit had maintained or regained access to certain systems. CDK advised dealers to continue operating manually.

Late June: CDK's parent company, Brookfield Business Partners, saw shares lose over 5.7% of their value. Publicly traded auto dealer groups -- Sonic Automotive, Group 1 Automotive, and AutoNation -- saw their share prices drop up to 4.4% as investors priced in the operational disruption.

By July 4: Access for nearly all dealers had been restored. But the damage was done.

The Financial Fallout

JD Power estimated that US retail unit sales in June 2024 decreased by up to 7.2% compared to June 2023 as a direct result of the CDK outage. Within the first two weeks, affected dealers recorded financial losses estimated at approximately $605 million.

At least eight class-action lawsuits were filed against CDK by dealerships whose operations were disrupted. The suits alleged negligence in CDK's cybersecurity practices, failure to adequately protect dealer data, and insufficient disaster recovery planning.

What Should Have Been Different

The CDK ransomware attack became a case study in what happens when a critical infrastructure provider has a single point of failure. Many dealers discovered that they had no offline fallback for DMS functions. CDK's backup and recovery procedures turned out to be slower than promised. And the fact that a single attack could knock out DMS, CRM, and Digital Retailing simultaneously suggested deeper architectural issues around system isolation and network segmentation.

For dealers, the key takeaway is not that CDK was attacked -- every major technology company is attacked constantly. The key takeaway is that when CDK went down, there was no meaningful Plan B. CDK has since invested heavily in its Network & Communication Services offerings, including enhanced cybersecurity, data backup, and business continuity planning. But the 2024 event raised questions that the company will be answering for years.

The Industry-Wide Fallout

The CDK ransomware attack had ripple effects across the entire automotive retail industry. Publicly traded dealership groups took a hit: Sonic Automotive shares dropped 4.1% in the days following the attack, Group 1 Automotive fell 3.8%, and AutoNation dropped 4.4%. The attack also affected CDK's parent company: Brookfield Business Partners saw its shares decline by more than 5.7%.

Beyond the stock market, the attack forced dealers to reckon with their own operational dependencies. Many dealers told the trade press that they had never seriously considered what would happen if their DMS went down for two weeks. The attack prompted a wave of interest in DMS redundancy, offline backup systems, and multi-vendor strategies.

The attack also accelerated a regulatory conversation. Several members of Congress expressed concern about the concentration of critical dealership infrastructure in the hands of two companies (CDK and Reynolds). The idea that a single ransomware attack could disrupt 15,000 dealerships -- and by extension, a significant portion of US automotive retail -- raised questions about systemic risk that had not previously been a focus for regulators.

CDK's Post-Incident Response

In the aftermath of the attack, CDK took several steps to rebuild trust with its dealer base:

• Public transparency. CDK provided regular updates throughout the restoration process, including detailed timelines and explanations of what systems were affected.
• Financial accommodations. CDK offered credits and payment accommodations to dealers who were affected by the outage.
• Security investments. The company committed to significant new investment in cybersecurity infrastructure, including enhanced network monitoring, improved access controls, and a more robust incident response capability.
• Business continuity planning. CDK worked with large dealer groups to develop and test business continuity plans specific to DMS outages.
• Third-party audits. CDK engaged external security firms to audit its systems and practices, and has shared portions of those audit results with enterprise customers.

Whether these measures are sufficient remains an open question. The true test will be how CDK handles the next incident -- because in cybersecurity, it's not a question of if there will be another incident, but when.

The Antitrust and Legal Landscape

The ransomware attack isn't the only legal headache CDK has faced. The company has been fighting antitrust battles for nearly a decade.

The Authenticom Lawsuit (2017-2020): Data integration provider Authenticom sued CDK and Reynolds and Reynolds in 2017, alleging that the two DMS giants conspired to block third-party access to their systems in order to create a duopoly. In July 2017, District Judge James Peterson granted a preliminary injunction against both companies, finding "the existence of a per se illegal horizontal conspiracy" to divide the data integration market between them. CDK settled with Authenticom in November 2020, making a one-time cash payment.

The Class Action Settlement (2025): CDK agreed to pay $100 million plus $250,000 in administrative costs to settle class-action claims that it conspired with Reynolds to charge unlawful prices for DMS and data integration services. Dealerships that did business with CDK from September 1, 2013, through August 15, 2024, were eligible to participate. The court approved the settlement on February 25, 2025.

The Autoloop Lawsuit (2018-ongoing): Software vendor Autoloop sued CDK in 2018, accusing CDK of restricting access to data and forcing vendors to pay hundreds of millions of dollars in overcharges. The lawsuit was granted class action status in July 2024.

The Tekion Lawsuit (December 2024): In what may be the most consequential legal action yet, Tekion -- CDK's most disruptive competitor -- filed a federal antitrust lawsuit against CDK in December 2024. Tekion alleges that CDK attempted to illegally monopolize the DMS market by withholding or delaying dealers' access to operations data, making it harder for dealers to switch to alternative management systems. This lawsuit, if it proceeds, could force CDK to open its data architecture in ways that fundamentally change its competitive position.

What CDK Excels At

For all the drama, there's a reason CDK powers 15,000 dealer locations. They do some things genuinely well.

Scale and Integration. No competitor comes close to CDK's ecosystem breadth. If you want one vendor for DMS, CRM, F&I, digital retailing, fixed operations, inventory management, and analytics, CDK is the only company that offers all of it with native integration. The "single throat to choke" argument has real weight when you're managing a multi-rooftop group.

OEM Connectivity. CDK maintains direct data connections with virtually every major OEM in North America. These connections are the backbone of warranty claims, incentive tracking, vehicle ordering, and service campaign management. Building equivalent connections from scratch would take years. This is CDK's deepest moat.

Data Assets. $540 billion in annual transaction volume gives CDK a dataset that no competitor can match. Their Intelligence Suite and analytics products are built on this data. When CDK tells you what your market looks like, they have the actual transaction data to back it up.

50 Years of Institutional Knowledge. CDK has been in this business since 1973. The company understands dealership operations in ways that newer entrants simply don't. Their best consultants are former dealers. That depth shows up in product design -- when it's done well -- and in the quality of their support organization.

Heavy Truck and Recreation. CDK serves not just automotive dealers but also heavy truck, recreation (RV, marine), and heavy equipment dealers. These adjacent verticals are often underserved by automotive-focused competitors, giving CDK a differentiated position.

What Dealers Should Watch Out For

CDK's strengths come with real risks that you need to factor into any buying decision.

Vendor Lock-In. This is the number one complaint about CDK, and it's the subject of multiple active lawsuits. Once your dealership is running CDK Drive, switching to another DMS is expensive, time-consuming, and operationally painful. CDK has been accused of making that switch deliberately harder than it needs to be by restricting access to dealer data. The Tekion lawsuit and the class-action settlement both center on this issue.

Integration Friction with Third Parties. If you want to use a best-in-class CRM from a different vendor, or a specialized inventory tool, or a third-party analytics platform, CDK's approach to data integration has historically been restrictive. The company's Fortellis platform was supposed to solve this by providing an open API marketplace, but adoption has been mixed.

Pricing and Contract Terms. CDK's contracts have been described by dealers as "sticky" in the worst way: multi-year terms, automatic renewal clauses, and pricing that escalates faster than inflation. The $100 million class-action settlement over pricing practices should tell you everything you need to know about how aggrieved dealers feel on this front.

Post-Ransomware Trust Deficit. The 2024 ransomware attack was a trauma for the entire industry. Even though CDK has publicly committed to improved cybersecurity, many dealers remain skeptical. The attack exposed that CDK's disaster recovery planning was inadequate for an incident of this scale. If you're evaluating CDK today, you should ask for a detailed walkthrough of their current business continuity and disaster recovery plans.

Post-Brookfield Commercial Pressure. Brookfield Business Partners paid $8.3 billion for CDK. Private equity firms don't pay that kind of money out of generosity. Brookfield needs to grow revenue and margins to generate a return on that investment. That pressure shows up in pricing, in the push toward full-stack subscriptions, and potentially in cost-cutting that could affect product quality and support.

Who CDK Is Best For

CDK is not the right fit for every dealership. Here's a realistic breakdown.

Best Fit:

• Multi-rooftop dealer groups running 3+ locations under common ownership. The Foundations Suite and enterprise-level support justify the cost. CDK's ability to provide a unified view of inventory, customers, and financials across multiple rooftops is genuinely valuable at this scale.
• Dealerships that value one-vendor accountability over best-of-breed flexibility. If you'd rather have one vendor to call when something breaks, CDK makes sense. The trade-off is that you're accepting "good enough" across the board rather than best-in-class in any specific area.
• Dealers with deep existing CDK relationships. If you've been running CDK Drive for years, have trained your staff, and have your processes wired around CDK workflows, the switching costs rarely justify the move. The math changes only if you're unhappy enough with CDK's service to absorb a painful 6-12 month migration.
• Franchised dealers who need OEM connectivity for warranty, incentives, and reporting. CDK's OEM connections are the deepest in the industry, and for most franchised dealers, this connectivity is non-negotiable.

Potential Misfit:

• Single-point independents (one location, one roof). The Fundamentals Suite is available, but competitors like Dealertrack and Tekion often offer better value at this scale. The complexity and cost of CDK's enterprise platform is hard to justify for a single rooftop.
• Dealers who want maximum flexibility to mix and match best-in-class products from different vendors. CDK's ecosystem works best when you go all-in. If you want to pair a Tekion DMS with a dedicated marketing CRM and a third-party inventory tool, CDK is not the right starting point.
• Dealers who experienced the 2024 ransomware outage and remain concerned about CDK's disaster recovery capabilities. This is an emotional factor as much as a rational one, but it matters. If your team lost trust in CDK's operational resilience during the outage, rebuilding that trust will take years.
• Dealers with aggressive data portability needs who want guaranteed access to move their data to another system on demand. CDK's track record on data portability -- shaped by the antitrust litigation described above -- should give any dealer pause. If data ownership and portability are non-negotiable for your organization, make sure your contract spells out the exit process in detail.
• Dealers in heavy truck or recreation verticals who don't need the full automotive DMS feature set may find PBS or other vertical-specific platforms to be a better fit, though CDK's heavy truck practice has dedicated resources.

A Framework for Deciding

If you're evaluating CDK (or considering a renewal), here's a decision framework:

1. Size. How many rooftops? Under 3, look seriously at alternatives. Over 5, CDK's unified platform economics start to make sense.
2. Integration needs. Do you run a best-of-breed stack already, or are most of your tools from a single vendor? If you're already multi-vendor, the marginal value of CDK's integration is lower.
3. OEM relationships. How important are seamless OEM connections? For high-volume franchised dealers, this is critical. For independent dealers, it's irrelevant.
4. Risk tolerance. How much does the 2024 ransomware attack factor into your decision? If you need ironclad guarantees about uptime and disaster recovery, get them in writing.
5. Vendor relationship. How is CDK treating you today? If pricing has been escalating faster than services, or if support quality is declining, those are signals that the Brookfield-driven pressure to improve margins is affecting your account.

Questions to Ask CDK Sales

Before signing a CDK contract -- or renewing an existing one -- ask these questions and push for written answers.

1. What is your current business continuity and disaster recovery plan for a system-wide outage, and what specific guarantees can you put in writing regarding recovery time objectives (RTO) and recovery point objectives (RPO)? The 2024 ransomware attack made this the most important question in dealership technology. If CDK can't give you specific, contractual SLAs for recovery, that's a red flag.

2. Can you provide a list of all third-party integrations that work natively with my chosen suite, and which ones require additional middleware or fees? Integration costs are often hidden in the fine print. Get the full list in writing.

3. What is the exact process and cost for extracting my data if I choose to switch DMS providers at the end of my contract term? Get specific. How long does a data export take? What format is it in? Are there fees? Is there an exit assistance team? If the answer is vague, that's intentional.

4. How is the Brookfield ownership affecting your product roadmap and pricing strategy? This is a fair question. CDK's sales team should be able to articulate Brookfield's investment horizon and how it affects the products you're buying.

5. What specific cybersecurity improvements have been made since the June 2024 ransomware attack, and can you share any third-party audit results? If CDK pushes back on sharing audit results, ask for a SOC 2 Type II report or equivalent. Any enterprise technology vendor should have one.

The Competitive Landscape

CDK operates in a market that has become significantly more competitive over the last five years. Where dealership technology decision-makers once had a binary choice between CDK and Reynolds, they now have a richer set of options -- each with distinct trade-offs. Here's how the major players stack up.

Reynolds and Reynolds (Reynolds)

The closest analog to CDK in size and market approach. Reynolds is privately held (formerly owned by Universal Computer Systems), family-led, and famously secretive. Like CDK, Reynolds runs a large installed base of dealerships on its ERA DMS platform. Like CDK, Reynolds was a co-defendant in the Authenticom antitrust lawsuit and the class-action pricing settlement. The two companies have historically been described as a "duopoly" in the DMS market.

Where they differ: Reynolds is more rigid about third-party integration (even more so than CDK, which is saying something). Reynolds is also more expensive on average. CDK has a broader product portfolio -- Reynolds doesn't compete as aggressively in digital retailing or intelligence/analytics. Reynolds' relationship with its dealer base is more adversarial in reputation, though the company has made efforts in recent years to improve customer satisfaction.

In terms of market share, CDK and Reynolds together control an estimated 70-75% of the franchised DMS market in North America. That dominance is what has drawn the attention of antitrust regulators.

Tekion

Tekion is the disruptor. Founded in 2016 by former Tesla and SpaceX engineer Jay Vijayan, Tekion built its DMS from scratch on a modern cloud-native architecture (no legacy green-screen code). The company has been winning high-profile dealer groups and OEMs, and its December 2024 federal antitrust lawsuit against CDK signals that it sees litigation as a competitive tactic.

Tekion's advantages are real: its architecture is genuinely modern, its user interface is best-in-class, and its open API philosophy stands in sharp contrast to CDK's historically closed approach. Tekion is cloud-native -- no on-premise servers, no data center footprint for dealers. The company's D2C (Direct to Consumer) digital retailing product is tightly integrated with its DMS, creating a seamless online-to-in-store experience.

Tekion's disadvantages are equally real. Its installed base is a fraction of CDK's. Its OEM connectivity -- the lifeblood of any DMS -- is still incomplete; not every manufacturer's systems talk to Tekion cleanly. And the company is burning through venture capital with no clear path to near-term profitability. The question for dealers considering Tekion is not whether the product is better (it often is), but whether Tekion will be around in ten years to support the product.

The December 2024 antitrust lawsuit against CDK is a strategic move. Tekion is alleging that CDK uses its control of dealer data to prevent dealers from switching to Tekion. If Tekion wins, it could force CDK to open its data architecture in ways that would dramatically lower switching costs -- potentially reshaping the competitive dynamics of the entire DMS market.

Dealertrack (part of Cox Automotive)

Cox Automotive's Dealertrack is a strong competitor, particularly in digital retailing, F&I, and CRM. Dealertrack doesn't have its own DMS -- it partners with DMS providers -- which makes it both a complement and a competitor to CDK. Cox's portfolio also includes Autotrader, Kelley Blue Book, Manheim, and vAuto, giving them an unmatched data and media footprint.

Dealertrack's strengths: integration with Cox's media properties, strong digital retailing tools, and a more open integration philosophy. If you advertise on Autotrader and value KBB instant cash offer, Dealertrack provides a natural integration path that CDK can't match.

Weaknesses: no owned DMS means dependency on partnerships with CDK and Reynolds, and the Cox corporate structure can be slow-moving. Dealertrack is also more focused on the front-end of the dealership (sales, marketing, retailing) than the back-end (accounting, parts, service), which means dealers typically need multiple vendors to run their full operation.

ProMax, PBS, and Other Independents

The long tail of DMS and dealership software providers includes ProMax, PBS, Auto/Mate (now part of Cox), and a variety of regional and niche players. These companies serve specific segments -- often single-point dealerships, specific verticals, or geographic regions. They don't compete with CDK on scale, but they offer alternatives for dealers who don't want the complexity or cost of an enterprise DMS.

ProMax, for example, is popular among independent used-car dealers who find CDK's platform over-engineered and overpriced for their needs. PBS has a strong following in the truck and equipment space. These platforms are generally more affordable and simpler to operate, but they lack the OEM connectivity, feature depth, and ecosystem breadth of CDK.

The New Wave: AI-Native and Vertical SaaS

A new generation of AI-native dealership tools is emerging. Companies like AutoFi (digital financing), MooveIt (inventory management), and various AI-powered CRM and marketing tools are beginning to eat away at the edges of CDK's product portfolio. None of them are DMS replacements, but they reduce the value of CDK's integration advantage by offering specialized tools that work across multiple DMS platforms.

The rise of generative AI is also creating new competitive dynamics. CDK has incorporated AI into its Intelligence Suite and Vehicle Inventory Suite, but startups are moving faster. Several AI-native dealership tools launched in 2024 and 2025 offer capabilities -- automated customer communications, predictive inventory optimization, AI-driven service upsells -- that compete with CDK's products on functionality, even if they don't compete on integration depth.

The OEM Factor

An underappreciated competitive dynamic is the role of OEMs. Several manufacturers have invested in -- or are evaluating -- their own dealership technology stacks. If a major OEM were to mandate a specific DMS or digital retailing platform for its franchisees, that could reshape the competitive landscape overnight. For now, most OEMs maintain a neutral posture, but the technological dependencies (and frustrations) created by the CDK ransomware attack have prompted more OEMs to ask hard questions about the resilience of their dealer networks' technology infrastructure.

What Dealers Should Know

If you take nothing else away from this deep dive, here are the headlines.

CDK is not going anywhere. Fifteen thousand dealer locations don't migrate DMS platforms overnight. CDK's installed base, OEM relationships, and balance sheet (backed by Brookfield) mean they'll be a dominant force in automotive retail technology for the foreseeable future. Betting against CDK is betting against gravity. Even in the worst-case scenario -- a major customer exodus following another security incident -- the migration timelines for DMS replacements are measured in years, not months.

But the moat is shrinking. The duopoly that CDK and Reynolds enjoyed for decades is under serious assault. Tekion is winning enterprise accounts. Cox Automotive is building a more integrated alternative. AI-native tools are chipping away at product categories that CDK used to own by default. And the antitrust environment has shifted -- regulators and courts are taking dealership data portability seriously. The $100 million class-action settlement and the Tekion antitrust lawsuit are not noise; they're indicators of a structural shift in how the DMS market operates.

The ransomware attack was a watershed moment. Before June 2024, most dealers treated CDK's reliability as a given. After June 2024, every dealer should be asking about disaster recovery, data backup, and business continuity -- not as an afterthought, but as a primary evaluation criterion. CDK has made investments in this area, but the burden is on them to prove they've learned the lesson. If you're a CDK customer, ask for a tabletop exercise or a BCP walkthrough. If you're evaluating CDK, make disaster recovery a contractual requirement, not a talking point.

Your data is your asset. The single most important shift in the dealership software market over the next five years will be the fight over data portability. CDK's antitrust battles, the class-action settlement, and the Tekion lawsuit all center on one question: who owns the data and how easily can it move? Your contract should reflect your answer to that question. Specifically:

• Ensure your contract guarantees data export at no additional cost upon termination.
• Understand what data is stored in CDK's systems and what format it's available in.
• Ask about API access for third-party tools you might want to use.
• Negotiate an exit assistance clause that includes CDK-funded data migration support.

Evaluate on outcomes, not features. This is true of any technology vendor, but it's especially true with CDK. Don't get lost in feature comparison charts. Ask the hard questions about total cost of ownership, switching costs, exit procedures, and what happens when something goes wrong. The 2024 ransomware attack showed that in a crisis, it's not the feature set that matters -- it's the operational resilience underneath. A DMS with fewer features that stays up is infinitely more valuable than a DMS with every bell and whistle that goes dark for two weeks.

The Brookfield factor cuts both ways. Brookfield's $8.3 billion investment in CDK means the company has access to capital and a long-term owner. But it also means there's an exit strategy. Private equity firms typically hold assets for 5-7 years. Brookfield acquired CDK in 2022, which puts a potential exit window in the 2027-2029 timeframe. How that exit happens -- whether through another sale, a secondary buyout, or a return to the public markets -- will shape CDK's strategy in the intervening years. If Brookfield is preparing for an IPO, the pressure will be on revenue growth and margin expansion. If they're looking for a strategic buyer, the emphasis will be on market share and product breadth.

The next 24 months are critical. Between the Tekion antitrust lawsuit, the ongoing integration of post-ransomware security improvements, the Fortellis platform evolution, and the competitive pressure from Cox and Tekion, CDK is at a strategic inflection point. The company's response to these challenges -- and its ability to rebuild trust with the dealer community -- will determine whether it emerges stronger or begins a slow decline from its dominant position. For dealers making technology decisions today, this uncertainty argues for shorter contract terms, more flexibility, and a clear understanding of your data portability rights.

The best defense is a well-negotiated contract. No matter which vendor you choose, the quality of your contract matters more than the quality of the product. This is especially true with CDK, where the switching costs are high and the vendor has significant leverage at renewal time. Invest in legal review of your dealership technology contracts. Negotiate termination rights, data portability, SLA guarantees, and pricing caps. The time to negotiate is before you sign, not after a disruption.

This article was researched and written for dealership owners, general managers, and marketing directors making informed decisions about automotive retail technology. Sources include CDK Global's public website (cdkglobal.com), SEC filings (from pre-2022 public company period), court documents from ongoing litigation, industry reporting on the 2024 ransomware attack, CDK's published case studies and product documentation, and independent industry analysis. Information is current as of May 2026.

Disclaimer: This article is for informational purposes and does not constitute legal, financial, or procurement advice. Dealerships should consult qualified legal counsel and independent technology advisors when making vendor selection decisions.