Cyber security in automotive retail: one click is all it takes

October 30, 2026
6 minutes

One phishing email. One reused password. One unpatched server. That’s all it takes to bring a dealership to a standstill. Here’s what UK dealers need to know, and why the right technology partner makes the difference.

Cyber attacks are becoming more sophisticated, more targeted and more frequent, and UK car dealerships are firmly in the firing line. The cost of getting it wrong is serious: days of lost sales, expensive recovery, potential ICO fines and customers who don’t come back.

In October 2026, a widely reported PHP vulnerability put websites and software platforms across the world on alert. Many dealers will have been affected, or know someone who was. Click Dealer customers weren’t among them: our investigations found no evidence of any compromise to our systems, services or data. That’s not luck. It’s the result of security built into everything we do.

Here’s what you need to know, and the practical steps that significantly reduce your risk.

Why automotive retailers are a prime target

According to the government’s Cyber Breaches Survey 2025, 43% of UK businesses experienced a cyber breach or attack in the previous year. Of those, 85% identified phishing as part of the attack.^[1]

Dealerships are especially attractive because they handle valuable personal data and high-value transactions every day, including:

Customer names and contact details
Driving licence and identity documents
Finance application information
Banking details
Vehicle ownership records

Criminals know the value of this information. Often, they need access to just one employee account to impersonate staff, access systems or target your customers.

The industry has already paid the price

The automotive sector has already seen the consequences first-hand. The Jaguar Land Rover cyber incident ^[2] highlighted how cyber attacks can create widespread disruption across the industry, while incidents involving Arnold Clark ^[3], Pendragon ^[4] and CDK Global ^[5] exposed risks of ransomware, data exposure and on digital systems.

The CDK Global attack is the clearest warning for dealers. It wasn’t the dealerships that were breached; it was their technology provider. Thousands of businesses were left unable to trade. Your security is only as strong as the partners you rely on.

What’s really at stake?

Cyber security is no longer an IT issue. It’s a business continuity issue.

Modern dealerships rely on technology to manage stock, handle enquiries, submit finance applications and run aftersales. When those systems go down, so does your ability to sell. Add the regulatory risk (serious data breaches can lead to fines of up to £17.5 million or 4% of global turnover under UK GDPR) ^[6] and the reputational damage, and the cost lands where it hurts most: your customers, your reputation and your revenue.

AI has changed the game

AI isn’t just making scams more convincing. It’s making attacks faster, bigger and more precise.

Finding the weak spots. Criminals are using AI to scan software and websites for vulnerabilities, and to work out how to exploit them, in a fraction of the time it once took. The National Cyber Security Centre warns that AI will make vulnerability research and exploit development more effective, shrinking the window between a flaw being disclosed and attackers exploiting it.^[7]

Speed and scale. Tasks that once took a skilled hacker days can now be automated and run against thousands of businesses at once. When a vulnerability like October’s PHP flaw goes public, attackers can be probing for it within hours, not weeks. Any business that’s slow to react is exposed.

Smarter phishing. Poor spelling and strange wording used to give phishing emails away. Not anymore. AI produces convincing, personalised messages in seconds and sends them at scale.

The result: your team can’t be expected to catch everything, and you can’t afford a technology partner who waits to act. Security built into your systems, and monitored around the clock, matters more than ever.

How Click Dealer protects our dealerships

At Click Dealer, security isn’t an add-on. It’s built into every website and system we provide, so dealers are protected from day one without needing to become cyber security experts.

Multi-Factor Authentication for every user
From this autumn, multi-factor authentication (MFA) is standard across all Click Dealer systems. Every user will confirm who they are with a second step, such as a code from an authenticator app, as well as their password. Microsoft research found that MFA reduces the risk of compromise by 99.2%.^[8] Many providers still leave MFA optional. We’ve made it mandatory, because a stolen password should never be enough to get into your business.

Cloudflare protection on every site
Dealer websites and software are protected by Cloudflare, one of the world’s largest security networks. It stops DDoS attacks, malicious bots and suspicious traffic before they reach your site. Over the past 12 months, Cloudflare has protected Click Dealer services from DDoS attacks and blocked millions of malicious requests, with no disruption to dealers.

Enterprise-grade infrastructure on AWS
Our platform runs on Amazon Web Services, the same infrastructure trusted by banks, governments and global retailers. Resilience, encryption, backups and round-the-clock monitoring all come as standard.

Group-level expertise behind every dealer
As part of the Centeca Group, we have dedicated technology and security teams who track new threats and act quickly. When a major PHP vulnerability came to light in October 2026, our teams moved straight away to assess our systems, work with our technology partners and apply fixes, with limited impact on dealers.

“Dealers shouldn’t have to choose between growing their business and protecting it. That’s why every Click Dealer partner gets enterprise-grade security as standard, whether they run a single site or a multi-site group.”

– Ben Espin, Head of Product & Engineering, Click Dealer

Cyber security should be part of every technology buying decision

Whether you’re choosing a website, CRM, DMS or finance platform, security should be part of the decision.

Here’s what to ask, and how Click Dealer answers:

Where is my data hosted, and how is it protected? On enterprise-grade AWS infrastructure, plus encryption and backups.
Is Multi-Factor Authentication available? At Click Dealer, yes. We’re making MFA mandatory for every user.
How are websites protected from attacks? Cloudflare protects our dealer websites and applications from DDoS attacks, malicious bots and suspicious traffic.
How are threats monitored? Our Technology and Security teams monitor our systems, 24/7.
How fast do you respond to new vulnerabilities? When October’s PHP vulnerability hit, our teams were already assessing systems and putting precautionary measures in place.

If your current provider can’t answer these questions clearly, that’s your answer.

What the best-protected dealerships do

Technology does the heavy lifting, but people matter too. The best-protected dealerships get the basics right, every time:

Use strong, unique passwords and never share logins
Remove accounts for staff who have left
Train teams to pause before clicking links or opening attachments
Have a clear plan for what to do if something goes wrong
Choose technology partners who take security as seriously as they do

One click is all it takes

One click can let an attacker in. The right partner keeps them out.

If you’re a Click Dealer customer, Cloudflare protection and enterprise-grade infrastructure are already working for you, and mandatory MFA is being rolled out to every user. If you’re not, now is the time to ask whether your current provider is doing the same.

Talk to our team about protecting your dealership.