 There's a tremendous amount of investigative work that has to be performed to figure out how did the threat actor get into the environment and do they still have access. The second thing organizations need to do is they need to start to recover their systems and their environment so that they can continue to run business operations. Many dealers have had to process sales the old-fashioned way with pen and paper, but CDK says its clients should have their services back by Thursday. Peter King, CBS News.