(Reuters) – A group of hackers claiming responsibility for a cyberattack on CDK software systems has demanded millions of dollars in ransom to end the hacking attack that hit auto dealers across the United States, Bloomberg News reported on Friday.
The group behind the attack is believed to be based in Eastern Europe, according to the report, which cites sources familiar with the situation.
The auto trading technology and software provider planned to pay the ransom, Bloomberg News reported.
CDK, which supplies software to car dealerships, did not immediately respond to a Reuters request for comment.
US auto retailers Sonic Automotive (NYSE:) and Penske Automotive reported disruption on Friday as CDK experienced outages for the third day in a row.
In an emailed statement, Ford (NYSE:) said dealers using CDK experienced a system outage across the industry.
“However, many Ford and Lincoln customers can receive sales and service support through alternative processes available to our dealers,” Ford said.
Sonic said its dealerships are open and working to minimize disruptions. The company said it could not determine whether the outage would impact its financial condition, but it did have a “negative impact” on its operations.
Penske said its Premier Truck Group division, which sells new and used commercial trucks, also uses CDK’s legacy dealer management system.
“Premier Truck Group has implemented its business continuity response plans and continues to operate at all sites using manual or alternative processes,” Penske said.
The commercial truck dealership business has lower sales volumes than Penske’s auto dealership business, which does not use CDK software.
Kia America also told Reuters it was working with affected dealers to mitigate the impact of the outage and continue operations as usual.
CDK says on its website that it works with more than 15,000 retail locations throughout North America.