Cyberattack stalls US auto sales growth in Q2

The US automotive industry encountered an unexpected challenge in the second quarter of 2024, as a cyberattack on CDK Global, a leading provider of dealer management software, disrupted operations at numerous dealerships across the country. This incident had a significant impact on new vehicle sales, particularly during the crucial final weeks of June, traditionally a peak selling period for auto retailers.

Major automakers reported markedly slower sales growth compared to the same period last year. General Motors (GM), one of the nation's largest car manufacturers, saw a mere 0.6% increase in new vehicle sales, a stark contrast to the impressive 19% growth recorded in the previous year. GM acknowledged that the cyber incident would likely result in some sales being pushed into the subsequent quarter.

Similarly, Toyota Motor North America experienced a considerable slowdown, with sales rising by approximately 9%, significantly lower than the 20% surge observed in the prior year. This trend was echoed across other major players in the industry, with Hyundai reporting a modest 2% increase in second-quarter US sales, down from a 14% jump last year. Honda fared slightly better, posting an overall sales increase of about 2%.

Market research firm Cox Automotive estimates that the overall US new vehicle sales volume for the second quarter likely grew by just 1%, reaching nearly 4.2 million units. This represents a substantial deceleration from the robust year-on-year growth of about 16% seen in 2023.

The CDK Global cyberattack affected more than 15,000 retail locations that rely on the company's dealer management system. Jessica Caldwell, head of insights at Edmunds, aptly described the situation: "The CDK cyber attack has thrown a monkey wrench into sales during the second half of June, affecting what is arguably one of the most lucrative and busiest times of the month and quarter for dealerships."

Despite the setback, there is a silver lining. CDK Global announced on Tuesday that it was "ahead of the anticipated schedule" in resolving the issue, with substantially all dealer connections restored to the management system. Additionally, industry analysts expect vehicle retailers and automakers to recoup most of the lost sales in July, providing some relief to the sector.

However, the incident has highlighted the vulnerability of the automotive retail ecosystem to cyber threats and the potential for significant disruptions in an increasingly digitised industry. It serves as a wake-up call for enhanced cybersecurity measures across the automotive supply chain.

While the industry grapples with the aftermath of the cyberattack, other challenges persist. Chris Hopson, an analyst at S&P Global Mobility, noted, "New vehicle affordability concerns remain prevalent and inventories are not expected to advance as strongly as they have done over the past 12 months." This suggests that the road ahead for the US auto industry may continue to be bumpy, even as it recovers from the recent cyber incident.

In the electric vehicle segment, market leader Tesla reported a smaller-than-expected 5% drop in deliveries for the second quarter. The company's strategic use of price cuts and incentives helped stimulate demand in an increasingly competitive EV market.