- Motility suffers a ransomware attack that exposes confidential data of more than 766,000 clients
- Stolen data includes SSN, driving licenses and complete contact data
- Restoled services of the company, the monitoring launched and offers free identity protection for the victims
Motility Software Solutions, a company that provides the automobile dealer management software (DMS), suffered a recently ransomware attack in which hundreds of thousands of customers lost their confidential data.
The company confirmed the news in a presentation before the office of the MAINE attorney general, noting that the attack took place on August 11, 2025, and was seen approximately a week later, on August 19.
Motility saw the intrusion after experiencing “unusual activity” within certain servers. This unusual activity turned out to be an encrypper that prevents the company from accessing parts of its IT infrastructure.
Thousands of victims
“Although malware mainly restricted our access to internal data, forensic evidence suggests that, before encryption, the actor may have eliminated limited files that contain personal data from customers,” says the announcement.
Motility Software Solutions specializes in software for vehicle industry, including recreational vehicles, trailers, buses and marine vehicles. It offers a web -based platform that integrates CRM, accounting, inventory, programming of services and reports tools to optimize concessionaire operations.
Motility did not appoint the perpetrators, but said they stole full names, postal addresses, email addresses, telephone numbers, birth dates, Social Security numbers (SSN) and driver’s license numbers. In total, 766,670 people were affected, but at the time of publication, there were no indications that the information was being used in nature.
In general, cybercounts use these data for identity theft, financial fraud, phishing attacks and the creation of false accounts. It also allows them to participate in social engineering, tax reimbursement scams and unauthorized access to delicate services such as medical care or government benefits. They can also simply sell it on the dark website to the best bidder.
Fortunately, Motility had a job backup that allowed him to restore his services quite quickly. To mitigate the threat, it established a dark net monitoring, committed advice and other data security providers, and now offers affected people a year of free identity robbery protection services.
Through Bleepingcomputer