Peter Sherek, Author at A2C

The Social Engineering Attack Chain: How AI-Enabled Threat Actors Target Dealerships

May 20, 2026 / May 20, 2026 by Peter Sherek

Social engineering remains one of the most effective attack methods used against powersports, RV, and auto dealerships because it bypasses technology and goes straight for the human element. Recent reporting highlights how attackers increasingly rely on psychology, impersonation, and staged legitimacy to compromise organizations. AI tools make it almost impossible to determine fake personas from […]

A2C & NPDA’s Webinar – From Risk to Revenue: Leveraging Data Privacy Compliance

May 12, 2026 by Peter Sherek

Accelerate2Compliance recently joined the National Powersport Dealer Association to host an educational webinar covering data privacy, cybersecurity, and FTC Safeguards Rule compliance for powersports dealerships. Watch the full session below to learn how dealerships can reduce risk while turning customer trust into a competitive advantage. Consumer data privacy is no longer just a legal issue—it’s […]

FCC Prohibits Foreign Made Routers

May 6, 2026 by Peter Sherek

Did you get the memo? The one on the Internet from the FCC, you know, about your network routers? On March 23, 2026, the FCC published a list of prohibited computer network routers. They deemed that the routers on the “Covered List” pose an unacceptable risk to the national security of the U.S. and its […]

Consumer Privacy Enforcement Is Accelerating in 2026–2027 — What Dealerships Need to Know

April 9, 2026 / April 30, 2026 by Peter Sherek

Across the country, consumer‑privacy enforcement is entering its most aggressive period in decades. Both federal and state regulators have made it clear that businesses — including automotive, powersport, and RV dealerships — must ensure their privacy notices, website practices, and data‑handling operations accurately reflect what they actually do. The era of “copy‑and‑paste” privacy policies or […]

The New Digital Threat Landscape for Dealerships in 2026

April 8, 2026 / April 30, 2026 by Peter Sherek

Why Service Centers, Connected Cars, and Human Behavior Are Now the Biggest Cyber Risks The automotive industry is experiencing a level of cyber risk that would have been unthinkable just a few years ago. Dealerships across automotive, RV, and powersports have been caught in the crossfire of several major incidents over the past year—most notably […]

Service Centers: The New Front Line of Automotive Cyber Risk

March 18, 2026 / April 8, 2026 by Peter Sherek

If you want to understand where the next wave of cyber risk is hitting dealerships, powersports stores, and RV centers, look past the showroom and straight into the service lane. Upstream’s 2026 Global Automotive & Smart Mobility Cybersecurity Report makes it clear: attackers are no longer just targeting vehicles or OEM cloud platforms—they’re exploiting every […]

Does Your Website Cookie Compliance Function the Way You Expect It To?

February 25, 2026 / April 8, 2026 by Peter Sherek

Dealerships increasingly rely on website banners to manage customer tracking preferences—but recent lawsuits show that many banners don’t actually do what they claim. And regulators, especially in California, are making it clear: if your website says it honors opt‑out choices, it must do so in practice. A recent class action against the ATP Tour illustrates […]

Vishing Attacks Are Getting Smarter—Is Your Dealership Ready?

February 18, 2026 / April 8, 2026 by Peter Sherek

If you thought phishing was just about shady emails, think again. The latest wave of cyberattacks is hitting retailers through their ears—literally. It’s called vishing (voice phishing), and it’s been used to trick staff into handing over access to CRM systems like Salesforce. Even tech giants like Allianz Life, Google and Cisco have been caught […]

Kentucky’s New Privacy Law Is Now in Effect — What ALL Dealerships Need to Know, Regardless of Location

January 14, 2026 / April 8, 2026 by Peter Sherek

As of January 1, 2026, the Kentucky Consumer Data Protection Act (KCDPA) is officially in force, adding to the growing list of state-specific privacy laws. This act brings new expectations for any dealership that sells to or maintains a business relationship with Kentucky consumers. The law gives residents important rights over their personal data, including […]

Protecting Your Dealership in Light of the 700Credit Breach

December 3, 2025 / April 8, 2026 by Peter Sherek

700Credit recently announced that they were the victims of a hack that exposed personally Identifiable Information (PII). This event highlights the urgent need for dealerships to strengthen their data protection practices. You can read more about the breach here and here. Even if your store has not been directly impacted, this event underscores the importance […]

Executive Deepfakes: The New Frontier of Social Engineering

November 12, 2025 / April 8, 2026 by Peter Sherek

In today’s digital landscape, senior executives aren’t just leading organizations; they’re becoming prime targets. For auto, RV, and powersport dealerships, where leadership often holds direct access to financial systems, customer data, and vendor relationships, the risk is especially acute. But this threat extends far beyond the showroom floor. Any organization with high-profile executives and valuable […]

A2C’s Chief Compliance Officer, Matt Vatter, Talks About Protecting Customer Data and Dealers at DealerConnect 2025

November 12, 2025 / April 9, 2026 by Peter Sherek

Watch this video where our Chief Compliance Officer, Matt Vatter, discusses the risks dealers face and what Accelerate2Compliance does to help them address these risks and better protect their customers’ data and themselves.

Motility DMS Data Breach: A Wake-Up Call for Dealerships

October 14, 2025 / April 8, 2026 by Peter Sherek

In August 2025, Motility Software Solutions, a widely used dealer management system (DMS) provider for powersport and RV dealerships, suffered a significant ransomware attack that compromised the personal data of over 766,000 individuals. The breach exposed sensitive information, including names, birthdates, Social Security numbers, and driver’s license details. Although Motility has restored its systems and […]

Scattered Spider and ShinyHunters aren’t New Video Games

October 7, 2025 / April 8, 2026 by Peter Sherek

If you’re running a dealership, you’ve probably got enough on your plate: inventory, customer service, compliance, driving foot traffic, and keeping your digital tools up to date. But there’s a new kind of threat creeping into the industry, and it’s not just targeting the big guys anymore. Meet the emerging cybercrime collectives like Scattered Spider […]

“You Don’t Have to Be Hacked to Be Compromised”

September 23, 2025 / April 8, 2026 by Peter Sherek

Salt Typhoon, Scattered Spider, Shiny Hunter, and Silent Starling – sounds like code names from a spy novel, right? These are groups that are actively trying to infiltrate your digital systems and steal your data. Groups like these have compromised hospital systems, payroll platforms, cloud vendors, automobile OEMs, and even cybersecurity firms. Your industry is […]

The Data That Drives Your Business Can Also Destroy It

July 31, 2025 / April 8, 2026 by Peter Sherek

Most dealerships rely on Customer Relationship Management (CRM) tools to support growth. These systems help personalize outreach, guide marketing strategies, and build long-term relationships. CRM data includes names, contact info, purchase history, service records, and behavioral trends—valuable insights that help businesses thrive. But here’s the catch: that same data is just as valuable to cybercriminals. […]

Dealers Beware: The FTC Is Still Enforcing the Safeguards Rule

June 19, 2025 / April 8, 2026 by Peter Sherek

The Federal Trade Commission (FTC) recently reiterated its commitment to enforcing the Safeguards Rule, which requires dealerships and other financial institutions to develop, implement, and maintain a comprehensive information security program. As of June 16, 2025, the FTC has issued updated guidance (see the FAQ here) to remind organizations that compliance is not optional. A […]

Failure to Upgrade from Windows 10 is Like Leaving Your Dealership Open Overnight

June 10, 2025 / April 8, 2026 by Peter Sherek

Dealerships face significant security vulnerabilities, operational inefficiencies, and compliance risks if they do not act to upgrade their computers before October 2025. As the deadline for Windows 10 support looms closer, dealerships that have yet to make the switch to Windows 11 are running out of time. The Countdown to Windows 10 End-of-Support: Why Dealerships […]

State Privacy Rights Legislation: What to Expect in 2025

April 22, 2025 / April 8, 2026 by Peter Sherek

The issue of personal digital privacy is an increasing concern to consumers. As federal legislators struggle with federal legislation to regulate how businesses must handle consumer privacy, states across the U.S. are stepping up to protect consumer privacy. These laws aim to give individuals greater control over their personal data while imposing stricter compliance requirements […]

Renewed Threats to Dealership Data and Systems

April 17, 2025 / April 8, 2026 by Peter Sherek

As dealerships across the automotive, powersport, marine, and RV sectors rely more on technology, they’ve become prime targets for cybercriminals. The reappearance of the Chinese hacker group FamousSparrow and recent ransomware attacks highlight the urgent need for stronger cybersecurity. FamousSparrow Resurfaces The China-linked hacker group FamousSparrow has returned with upgraded tools like its backdoor SparrowDoor […]

Don’t Be The Next Target of the CPPA

March 24, 2025 / April 8, 2026 by Peter Sherek

On March 12, 2025, the California Privacy Protection Agency (CPPA) announced that it reached a settlement with the Honda Motor Company for violations of the California Consumer Privacy Act after an almost two-year investigation. The investigation revealed that Honda committed four primary violations. Understanding the nature of these investigations helps dealerships to look for similar […]

Vendor Risk Management: The Critical Role of Protecting Your Dealership

March 12, 2025 / April 8, 2026 by Peter Sherek

Dealerships must rely on third-party vendors to provide essential services, products, or support. While these partnerships can bring numerous benefits, they also introduce potential risks that can impact a dealership’s operations, reputation, and security. This is where third-party/vendor risk management (VRM) comes into play. Dealerships depend on a variety of dealer management applications for critical […]

“They Don’t Work With Customer Information; I Don’t Need to Train Them.”

February 19, 2025 / April 8, 2026 by Peter Sherek

We often hear feedback from our clients that they do not see value in providing information security training for staff that do not work with customers on a regular basis. Although on the surface, this may make sense, a deeper look might reveal why this could be introducing vulnerabilities to your information systems. Digital systems […]

What Should Dealerships Do Now That the CARS Rule Has Been Vacated?

February 10, 2025 / April 8, 2026 by Peter Sherek

On January 27, 2025, the U.S. Court of Appeals for the Fifth Circuit determined that the FTC did not follow proper procedure when it propagated the CARS Rule. When this announcement came out, dealers reached out and asked if they still needed to comply with the Safeguard rules. Even though the FTC is the regulatory […]