Motility Data Breach

The regulator record places the unauthorized access between August 11 and August 19, 2025. Motility detected unusual activity on August 19 and took the affected server offline.

The company's investigation found that an actor used malware to encrypt part of its systems and may have removed a limited number of files containing customer information before encryption. The initial-access method and the actor's identity were not publicly disclosed.

The categories varied by person. Official disclosures say the information may have included names, dates of birth, Social Security numbers, driver's-license numbers, or other government-issued identification numbers.

The notification letter also lists postal addresses, email addresses, and telephone numbers as potentially involved. This does not mean every data category was present for every affected person.

The Texas Attorney General's record reports 766,670 affected individuals, including 194,644 Texas residents. The company's September 12, 2025 announcement rounds the total to approximately 760,000 consumers.

Social Security numbers, dates of birth, and government-identification details can increase the risk of identity theft, fraudulent account applications, and targeted fraud when combined.

Addresses, phone numbers, and email addresses can also help an attacker create convincing messages that appear to come from Motility or a vehicle dealership. Accurate personal details in a message do not prove the sender is authorized.

Motility isolated the affected server, opened a forensic investigation, restored systems from clean backups, and said it implemented additional security tools. The company also notified law enforcement.

Potentially affected people were offered complimentary identity monitoring and identity-theft protection. Motility said its public investigation had found no evidence that the personal information was actually misused.

Notice recipients can monitor credit reports and financial accounts for unfamiliar activity. If a Social Security number or government ID was involved, a credit freeze or fraud alert may be appropriate.

For an unexpected message claiming to come from Motility, Reynolds and Reynolds, or a dealership, use the organization's official contact channel before following a link. Do not share a password, payment detail, or verification code.