Motility Software Solutions data breach: what happened and what to do

Motility Software Solutions makes dealership management software, the systems car dealers use to run sales, financing and service. If you bought or financed a car from a dealership that uses its software, your details may have passed through its systems even if you never heard the company's name.

What happened

Motility said it identified unauthorized activity inside its internal network on August 19, 2025. The Maine Attorney General filing gives a breach date of August 11, 2025, which is the date used here. The company also filed with the California and Washington attorneys general.

The Maine filing lists 766,670 people in total, including 18,270 Maine residents. The Washington notification counts residents of one state only, so it is a small part of the total. A ransomware group called PEAR claimed responsibility. Motility hasn't verified that claim.

What was exposed

Reporting on the notice lists names, addresses, email addresses, phone numbers, dates of birth, Social Security numbers and driver's license numbers. Not everyone had every item.

Social Security numbers and driver's license numbers are the ones to take seriously. Together with a name and date of birth, they're what criminals use for new credit applications, tax refund fraud and loans taken out in your name. Unlike a password, a Social Security number can't be swapped for a fresh one in most cases, so the exposure lasts for years.

What criminals can do with it

Dealership data is also useful for convincing scams. A caller who knows your name, address and that you recently financed a car can pose as a lender or the dealer and ask for a payment or a verification code. Expect that kind of call or text, and expect it to mention the purchase.

The company's response

Motility is offering affected people 12 months of identity theft protection, credit monitoring and fraud consultation. Your letter explains how to enroll and by when. Take it, since it costs nothing, but know that monitoring alerts you to problems after they start. A credit freeze is what blocks new accounts.

If you didn't get a letter, the dealership you used may not have been affected, or notice may still be in the mail. Ask the dealership which management system it uses.

Why a dealership software breach reaches so many people

Dealership management systems hold the paperwork behind a car deal: the credit application, the driver's license scan, contact details and the finance contract. Software vendors serve many dealers, so one vendor breach can include customers of dozens of dealerships. That's why the total here is in the hundreds of thousands, and why you can be on the list without ever dealing with the vendor.

If you got a letter, it names the data types that apply to you. A Social Security number on that list is the signal to freeze your credit and file taxes early next year if you can, since criminals sometimes file a fake return first to claim a refund. The IRS offers an Identity Protection PIN to anyone who asks, which blocks that.