[theindus]

Hello BMW fam,

Our custom order X50e was delivered to the dealership last night but unfortunately they were impacted by the hack. They are unable to process any payments and therefore can’t deliver the car. They are hopeful next week but there is actually no telling when this would be over.

What have you heard from your dealer if they have been impacted? Are you waiting for the hack to be over before you can get delivery of your vehicle?

[TurtleBoy]

They can't easily process the sale without the system. Some dealers are looking to use just paper but of course it has been many years since that has been done so will take awhile to set up. Last I saw CDK is in discussions to pay the ransom which will be in the millions. No expectation of when it will be settled.

[Kjorct]

In similar situation in Connecticut. Scheduled to pick up 2025 x5, when the virus hit. Now in limbo. Concerned that my military discount could go if car can’t be picked up by July 1. I am looking for dealer to provide assurance. I wonder what % of bmw dealers are affected?

[TurtleBoy]

Originally Posted by Kjorct

In similar situation in Connecticut. Scheduled to pick up 2025 x5, when the virus hit. Now in limbo. Concerned that my military discount could go if car can’t be picked up by July 1. I am looking for dealer to provide assurance. I wonder what % of bmw dealers are affected?

Welcome to the forum. You should have no concern about the military incentive going away and it os also very highly unlikely that the amount will change.

[theindus]

My dealer is starting to process orders using old fashioned pen and paper starting June 24. Ask your dealers how they are going to deal with this since it may take a very long time for CDK to recover.

[BlkGS]

Haven't called the BMW dealer lately, but our Expedition needs a recall done and they can't do anything. They can't check for parts availability, can't check for appointments, can't even check if it applies.

That said, I hope whatever scum did this die a slow, painful death and the rest.of their lives are miserable.

[Gibson6594]

A couple dealerships by me are affected. I text a buddy yesterday and he said they are basically in the stone age.

No good can come from this. Insurance will likely pay out ransom. Increase premiums. Potentially impact car prices. Who knows.

[LDT]

This could be a learning lesson for mankind but it won't. Cyber crimes will increase and one day the world economy will crash. I went to pick up my dry cleaning the other day. Clerk..."We cannot give you your clothes because we have a computer virus." Me...."here's my ticket please go find my stuff. I have cash." Clerk..."sorry sir we are not allowed to do that".
Now to be sure dry cleaning is not important and I have plenty of clean clothes in my closet. But cyber security just isn't effective as evidenced by recent attacks on financial, government and private sector entities.
Rant complete!

[dan1495]

I picked up a ‘22 M850i coupe yesterday from my local BMW dealer. We closed the deal but as others have mentioned it was manually done. It took a long time, which was understandable. I received no paperwork but was told it will be available when the system resumes functioning.

[Marty in NY]

Originally Posted by LDT

This could be a learning lesson for mankind but it won't. Cyber crimes will increase and one day the world economy will crash. I went to pick up my dry cleaning the other day. Clerk..."We cannot give you your clothes because we have a computer virus." Me...."here's my ticket please go find my stuff. I have cash." Clerk..."sorry sir we are not allowed to do that".
Now to be sure dry cleaning is not important and I have plenty of clean clothes in my closet. But cyber security just isn't effective as evidenced by recent attacks on financial, government and private sector entities.
Rant complete!

Sad.

Sherman, set the WayBack machine to 1980. My company started handing out IBM desktop computers...nobody wanted them. No one knew what to do with them. People didn't know how to use the software, they were typing letters in Excel cause it was easier to do than to figure out how to use Word Fast Forward: The world doesn't know how to work anymore without them and they are being used against us.

[sigmabody]

Originally Posted by BlkGS

That said, I hope whatever scum did this die a slow, painful death and the rest.of their lives are miserable.

OT, but I have more mixed/nuanced feelings on this. The software industry has proven, in general, time and time again, that they will do absolutely nothing to harden computer security absent some financial incentive to do so, and as computer software becomes more integrated into all aspects of people's lives, the potential real-world impact of software breaches only increases. Software security issues can clearly currently cost lives, future wars will likely involve mass casualties from software exploitation, etc.

Will breaches of current system, via ransomware, cost money, create hassle, and increase consumer costs as a result? Yes. But the hope is that at some point, the evaluation of insurance costs will be nuanced enough to reward companies which do a good job with software security, and penalize companies which do a poor job, which will skew those costs. If that happens, that will create a financial incentive for the industry to do better, and if that pressure is strong enough, it could literally save lives. In a sense, the "bad guys" of today (bad as they may be in any objective sense) could be filling a necessary role as the "good guys" in creating enough financial pressure to incentivize better software security down the road. And it absolutely necessary, because it's not going to happen otherwise; that's the reality of the world.

Breaches are bad, for sure... but I'd ague that the companies which consistently cut corners in software robustness and security to optimize for their own profits are at least as culpable as the bad guys who exploit those vulnerabilities. If you want to consider punishment for the people responsible for resulting outages, irrespective of legalities but only considering proximate cause of the damages, both of those groups deserve similar treatment.

[BlkGS]

Originally Posted by sigmabody

OT, but I have more mixed/nuanced feelings on this. The software industry has proven, in general, time and time again, that they will do absolutely nothing to harden computer security absent some financial incentive to do so, and as computer software becomes more integrated into all aspects of people's lives, the potential real-world impact of software breaches only increases. Software security issues can clearly currently cost lives, future wars will likely involve mass casualties from software exploitation, etc.

Will breaches of current system, via ransomware, cost money, create hassle, and increase consumer costs as a result? Yes. But the hope is that at some point, the evaluation of insurance costs will be nuanced enough to reward companies which do a good job with software security, and penalize companies which do a poor job, which will skew those costs. If that happens, that will create a financial incentive for the industry to do better, and if that pressure is strong enough, it could literally save lives. In a sense, the "bad guys" of today (bad as they may be in any objective sense) could be filling a necessary role as the "good guys" in creating enough financial pressure to incentivize better software security down the road. And it absolutely necessary, because it's not going to happen otherwise; that's the reality of the world.

Breaches are bad, for sure... but I'd ague that the companies which consistently cut corners in software robustness and security to optimize for their own profits are at least as culpable as the bad guys who exploit those vulnerabilities. If you want to consider punishment for the people responsible for resulting outages, irrespective of legalities but only considering proximate cause of the damages, both of those groups deserve similar treatment.

Honestly I agree. I think all infrastructure should be completely banned from.outside networks. All equipment used in those industries should have to be 100% American made, with a lengthy process to get foreign components approved, and those only being approved if domestic sources do not exist - no cost or lead time savings allowed.

I think fines for data breaches at companies should be so brutally devastating that companies either choose to make data security their top priority, or they simply don't allow themselves to have data saved to be stolen. Like millions of dollars per compromised account, paid out to the consumers affected. It should be an existential threat, where a breach could quite literally end your company.

[sigmabody]

Very off-topic now, but since we're stating opinions, and I happen to work directly in the computer software security field (I write security software)...

The government(s) should do two things, broadly:
1. Assign a monetary value to each individual item of PII (based on sensitivity and potential for fraud), and fine organizations if/when they collect PII and it is stolen from them
2. Create a mechanism to ensure a wide range of insurance costs for cyber-security insurance, based on effective measures in place (and ensure that insurers can audit for all the information necessary to make those decisions as informed as possible)

The first would do two things: discourage the collection and storage of PII unless absolutely needed and business justified (something which is desperately needed to reduce the attack surface areas), and create a meaningful financial incentive to secure it which scales with the size of the orgs. This would be far more effective in reducing the rate and severity of information theft than all existing measures, probably combined.

The second would allow insurance companies to based rates on actual, tangible risk, allow them to evaluate that risk properly, and encourage low insurance rates for orgs which had effective risk mitigation strategies in place. This would allow actual cost savings by implementing good security, rather than just amortizing the costs across all companies as most insurance currently does, and force the industry to provide effective solutions (and not just "checkbox security"). If done right, this could motivate a systemic change which raised the bar across the board.

Anyway, those are my thoughts on what should be done, fwiw.

[4KittensDad]

My custom X50e has been sitting at the BMW Spartanburg plant in status "Quality control" now for about two weeks. Neither Genius nor my dealer has been able to give me an explanation for the delay, but I would now suspect that it is sitting there because of the CDK Global hack. I have no idea when I might expect delivery. Frustrating

[theindus]

Originally Posted by 4KittensDad

My custom X50e has been sitting at the BMW Spartanburg plant in status "Quality control" now for about two weeks. Neither Genius nor my dealer has been able to give me an explanation for the delay, but I would now suspect that it is sitting there because of the CDK Global hack. I have no idea when I might expect delivery. Frustrating

As far as we can tell, the hack has had no impact on the BMW production. It’s the dealers that have been impacted. I remember reading from TurtleBoy that if your vehicle had an issue during QC, they may need to wait on parts from Germany and that can cause delays.

[TurtleBoy]

Originally Posted by 4KittensDad

My custom X50e has been sitting at the BMW Spartanburg plant in status "Quality control" now for about two weeks. Neither Genius nor my dealer has been able to give me an explanation for the delay, but I would now suspect that it is sitting there because of the CDK Global hack. I have no idea when I might expect delivery. Frustrating

Welcome to the forum. The above is correct. The hack no impact on production and likely is waiting for a part. The factory does not release the details to the dealer or Genius as to why a specific vehicle is in QC.

[Highline-Autos.com]

Unfortunately some of our warranty customers are having problems as well. The dealership's system simply can't take payment.

Trenton O. Gibson
tgibson@highline-autos.com
Highline Autos
Direct: 602.909.9216
Office: 480.348.0777

[MADBMWX5MC]

This is crazy, I had no idea this was going on until I read this post...

[BklynNYBMW]

Hi All, not only affecting new purchases but also buy out of leases. Got the approval for the loan last week Thursday after the down payment was established for the buyout of the M340i. My sales person told me he doesn't know when the system will be back up and running. I have an appointment Friday to finish up the paperwork. Will keep everyone posted on how that was handled.
__________________________________________________ ________________________________
2024 X6 M60i. Tanzanite Blue with Black extended Leather with Red Calipers. Every option box checked. No nickname yet
2021 M340i xdrive. Tanzanite Blue with W/Oyster with Red Calipers. All options except Adaptive M suspension, Driver Assistance Professional Package, Cooling and High Performance Tire package. AKA Blue Angel
*Retired 04/30/21: 2018 340i MSport Xdrive sedan. Glacier Silver w/Oyster. All options except active cruise control and window shades. AKA Airstream
* Retired 12/16/23: 2017 X6 5.0 MSport, Carbon Black Metallic w/ black leather. All options except vented seats and B/O sound system. AKA the Tumbler

[BklynNYBMW]

Hi All, Here is my follow up. I was just at my dealer in the city (Manhattan). As of now they are still doing orders and everything is done by paper work (written up by hand) to be sent in. According to him the order process can be anywhere from 2 to 2 1/2 hrs for the entire order process. Once that is done by paper it is a headache to either add/ delete options, change financing or length of term payments as everything has to be re written and re submitted. Unlike the when everything cold be done through the electronic system. I asked him about performance deliver and he just covered his face and said don't even ask. That is a whole another set of headaches.
My purpose to visit him today was to turn in the check to buy out the lease on the M340i. Even then all he could do was take the check. Then they had to hand write that the check was submitted for deposit. Crazy stuff. He says Corporate is working with all the dealers to get this solved but no one knows how soon that will be. The dealers (franchises) will be the first ones to try and solve the issue. Being that Manhattan is the corporate store they will be one of the last to get the fix. Hope this helps.
__________________________________________________ ________________________________
2024 X6 M60i. Tanzanite Blue with Black extended Leather with Red Calipers. Every option box checked. No nickname yet
2021 M340i xdrive. Tanzanite Blue with W/Oyster with Red Calipers. All options except Adaptive M suspension, Driver Assistance Professional Package, Cooling and High Performance Tire package. AKA Blue Angel
*Retired 04/30/21: 2018 340i MSport Xdrive sedan. Glacier Silver w/Oyster. All options except active cruise control and window shades. AKA Airstream * Retired 12/16/23: 2017 X6 5.0 MSport, Carbon Black Metallic w/ black leather. All options except vented seats and B/O sound system. AKA the Tumbler

[mnx5er]

Brutal from what I hear. My dealer is taking a day to get deals/paperwork done. Back to piles of paper.

[BlkGS]

My dealer was all but unaffected. They use a different system, so the only impacts they've had is a lot more people trying to get service through them.