CDK Global said “substantially all” the dealerships it serves that were disrupted by a hack have seen their management systems come back online.

A hacking group called BlackSuit is behind the cyberattack on CDK Global that has paralyzed car sales across the U.S., according to Allan Liska, a threat analyst at the security firm Recorded Future Inc.