Motility Software Solutions Data Breach Investigation

Data Breach Blog

Data Breach

Motility Software Solutions Data Breach Investigation

Almeida Law Group Calendar Icon

Date of data breach:

October 23, 2026

by: Almeida Law Group

Almeida Law Group is investigating a data breach at Motility Software Solutions. The breach occurred on August 11th–19th, 2025 and was discovered on August 19th, 2025. If you were affected, contact Almeida Law Group.

About Motility Software Solutions

Motility Software Solutions, formerly known as Systems 2000/Sys2K, is a provider of dealer management software (DMS) for the specialty vehicle industry. Founded in 1984 and headquartered in Maitland, Florida, the company serves approximately 7,000 dealerships across automotive, RV, marine, powersports, heavy-duty truck, bus, and emergency vehicle sectors. It is a subsidiary of The Reynolds and Reynolds Company. Its software platform covers CRM, inventory management, accounting, payroll, service scheduling, and related dealership operations—functions that require the collection and storage of sensitive personal and financial information belonging to dealership customers.

What Happened?

Motility Software Solutions was listed in a Texas Attorney General data security breach report (record ID BR-0005446, published October 23rd, 2026). The filing identifies a ransomware attack in which an unauthorized actor deployed malware that encrypted a portion of the company’s systems. The breach window runs from August 11th, 2025 through August 19th, 2025, with discovery on August 19th, 2025. Forensic investigation determined that, before encrypting systems, the attacker may have removed limited files containing customers’ personal data. Affected individuals were notified by U.S. Mail. The Texas Attorney General filing lists 767,562 total persons affected. Compromised information included full names, dates of birth, Social Security numbers, driver’s license numbers, addresses, email addresses, telephone numbers, and financial information such as account numbers and credit or debit card numbers—though the specific data types varied by individual. Motility restored systems from backups, engaged law enforcement, and offered 12 months of free credit monitoring through Norton LifeLock.

The PEAR (Pure Extraction And Ransom) ransomware gang claimed responsibility on its dark web leak site, alleging it stole 4.3 TB of data from Reynolds & Reynolds and Motility. Neither Motility nor Reynolds & Reynolds has verified that claim. Reynolds and Reynolds publicly disclosed the breach on September 12th, 2025, and the incident was also reported to the Maine Attorney General’s office. A class action lawsuit, Lockwood v. Motility Software Solutions, Inc. (Case No. 3:25-cv-00330, U.S. District Court, Southern District of Ohio), was filed on October 3rd, 2025. A $4,949,500 settlement received preliminary court approval on April 22nd, 2026, covering approximately 760,797 class members who may be eligible for up to $5,000 for documented out-of-pocket losses or an estimated $75 cash payment, plus credit monitoring. A final approval hearing was scheduled for August 14th, 2026.

Key Facts at a Glance

  • Company or Organization: Motility Software Solutions
  • Industry: Software / Dealer Management Systems (DMS) for specialty vehicle dealerships
  • Location: Maitland, Florida
  • Incident type: Ransomware attack with possible data exfiltration
  • Date of breach: August 11th, 2025 – August 19th, 2025
  • Date breach discovered: August 19th, 2025
  • Date of consumer notification: September 12th, 2025 (public disclosure by Reynolds and Reynolds); individual notices sent by U.S. Mail
  • Total persons affected: 767,562
  • Identity theft protection offered: 12 months of free credit monitoring through Norton LifeLock
  • Litigation status: Class action settlement of $4,949,500 received preliminary approval on April 22nd, 2026 (Lockwood v. Motility Software Solutions, Inc., Case No. 3:25-cv-00330, S.D. Ohio); final approval hearing scheduled for August 14th, 2026
  • Source: Texas Attorney General Data Security Breach Report; BleepingComputer; Comparitech; ClassAction.org

What Should You Do?

If you received a notice from Motility Software Solutions, enroll in the free 12-month credit monitoring through Norton LifeLock before the enrollment deadline stated in your notice. Regardless of whether you enroll, consider placing a fraud alert or credit freeze with the three major credit bureaus—Equifax, Experian, and TransUnion—to make it harder for someone to open new accounts in your name. Review your credit reports for free at AnnualCreditReport.com and monitor your bank and financial accounts for unauthorized transactions. Because financial account and card numbers were among the data types exposed, contact your financial institutions if you see any suspicious activity. If you believe your information has been misused, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery.

Your Legal Rights

If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.

Were You a Victim of a Data Breach?

"*" indicates required fields

By clicking the SEND button and submitting this form, I consent to receive communications from Almeida Law Group LLC and their co-counsel by phone call, email, and/or SMS regarding this matter and other potential legal matters. I understand that message and data rates may apply and that consent to such contact is not required for use of these services. Message frequency varies. Reply STOP to opt-out and HELP for help. I also agree to the Privacy Policy. I understand that my information may be shared with advertising partners to deliver targeted advertisements and optimize outreach efforts. I confirm that I am at least 18 years old. I have read and understand the disclaimer above. I agree my use of this site and the information provided here is not intended to create and does not create an attorney client relationship with the Almeida Law Group and/or attorneys employed by the Firm. No attorney client relationship is intended or created unless and until an engagement agreement is signed by all relevant parties. The contents of this site constitute attorney advertising and not legal advice; therefore you should not act or rely upon any information contained herein, and should always seek the advice of an attorney.

Resourceful. Resilient. Relentless.

Contact us today to get the justice you and your family deserve.