766,000 Impacted by Data Breach at Dealership Software Provider Motility

SecurityWeek reports that Motility Software Solutions, a dealership software provider, is notifying over 766,000 people that their personal information was compromised in a ransomware attack discovered on 19 August. The attackers deployed file-encrypting ransomware and also stole files containing customers’ names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers, and driver’s licence numbers.

Motility states there is no evidence of actual misuse of the information so far, and is offering 12 months of free identity theft protection, credit monitoring, and fraud consultation. The breach was initially disclosed by Motility’s parent company Reynolds and Reynolds on 12 September, with the Maine Attorney General's Office later confirming that 766,670 individuals were affected.

SecurityWeek notes that Reynolds and Reynolds previously stated its systems were not affected, and a Pear ransomware gang listing on its Tor site claims the theft of 4.3 terabytes of data, suggesting the data may have originated from the subsidiary.