
A ransomware attack in a provider of dealer management software (DMS), a ransomware attack in Motivity Software Solutions has highlighted sensitive data of 766,000 customers.
Obesity (formerly known as System 2000/SYS2K) is a provider of DMS software used by 7,000 dealerships (Automotive, PowerSports, Marine, Heavy-duty and RV Retail) in the United States.
Its products cover mobile or web access to control customer relationship management (CRM), inventory management, sales, accounting, financial, service operations, rent and fleet, as well as the dashboard.
According to a notification shared with the office of the Main Attorney General, on August 19, the cybercatac suffered, where hackers encrypted some of their systems after stealing individual data files.
“About August 19, 2025, we discovered unusual activity within some computer servers, supporting our business operations,” reads the notification sent to the affected individuals.
“An investigation determined that an unauthorized actor deployed malware, which encrypted a part of our system.”
The company says that malware has banned access to internal data and forensic evidence that the attacker may have “removed the limited files with customers’ personal data.”
The data types exposed are different per capita, and it can have the following items:
- Full name
- Portal address
- email address
- Telephone number
- Date of birth
- Social Security Number (SSN)
- Driver license number
The company conducted a thorough investigation, implemented additional safety measures, and restored the backup -affected systems.
It is not clear whether the dynamics are engaged with the danger actors, but the company established the dark web monitoring system to find out whether the stolen data emerges on the underground forum.
Mobility underlines that there is no evidence that the stolen information has been misused so far, but urges individuals to take protective action and increase their vigilance.
On that front, the company offers a year of free identity monitoring services through Lifelock, using a unique activation code to notification to the recipients by 19 December to enroll.
The affected individuals are also recommended to closely monitor their credit report and consider fraudulent alerts and keeping credit freeze on their files.
At the time of writing, no ransomware group has claimed responsibility for attack on mobility.


