Data breach at Motility Software Solutions affects over 766K customers

A ransomware attack at Motility Software Solutions, a company that provides computer services to recreational vehicle and powersport dealers, has affected 766,670 customers, exposing their personal data.

According to a data breach notification addressed to the Office of the Maine Attorney General, the company suffered a “data security incident” on or around August 19th, 2025. IT employees detected “unusual activity” on certain servers that supported the company’s business operations.

“An investigation determined that an unauthorized actor deployed malware that encrypted a portion of our systems. Although the malware primarily restricted our access to internal data, the forensic evidence suggests that, before encryption, the actor may have removed limited files containing customers’ personal data,” Motility Software Solutions says in the notification.

The type of data the attackers were able to access varies from person to person, but it may have contained full names, postal addresses, e-mail addresses, telephone numbers, dates of birth, social security numbers, and driver’s license numbers.

Upon discovery, the company conducted a forensic investigation to determine the scope and nature of the incident. Expertise from external data security providers was provided. In addition, IT employees implemented additional security measures to prevent a recurrence.

Lastly, the affected servers were restored using clean back-ups, and dark web monitoring was established.

As of this writing, there’s no evidence that the attackers have misused any of the stolen information. Nevertheless, Motility recommends that victims take appropriate steps to prevent misuse, including reviewing credit card bills, bank statements, and credit reports for unauthorized activity.

“While Motility has restored systems and deployed dark web monitoring, Motility reports no evidence of misuse yet and is offering affected individuals one year of free identity monitoring services. At an estimated cost of this service of around $8 per person, the financial impact may be around $6,128,000 without consideration of any potential regulatory fines,” says Corian Kennedy, Chief Threat Intelligence Officer at SecurityScorecard.

The company is providing a year of free identity and credit monitoring services through LifeLock.

No ransomware operation has currently claimed responsibility for the ransomware attack on Motility Software Solutions.

Unlock more exclusive Cybernews content on YouTube.