Motility Software Solutions data breach: RV and powersport dealers' customers, ransomware in August 2025

Oregon's Department of Justice records 766,670 people for Motility, with a breach window from August 11 to August 19, 2025, discovery on August 19 and notice on September 29, 2025. The window shows the intruder was inside for about eight days before the encryption was found.

Why did I get a letter from Motility Software Solutions?

Motility runs computer services for RV and powersport dealers, so its files held information about those dealers' customers. The people written to are customers of RV and powersport dealers that used Motility. The letter does not name the dealers. The guide to letters from companies you never dealt with explains how a vendor's breach reaches you.

What happened at Motility?

The investigation found that an unauthorized actor deployed malware that encrypted part of Motility's systems. Motility says it investigated, added security tools, restored its systems from clean backups, set up dark web monitoring and brought in outside help.

Date	What the letter and the regulators' records say
August 11, 2025	Breach date on the Washington and Texas records
August 19, 2025	Motility detects unusual activity
September 29, 2025	Notice recorded by California
September 30, 2025	Washington notice (8,369 residents)
October 23, 2026	Texas posts a report counting 194,755 Texans

The Texas report came 13 months after the first notices. The documents do not say whether it covers a later round of letters. The ransomware guide explains how companies describe encryption and data theft together.

What information was involved?

The letter says the files varied by person and may have contained full name, postal address, email address, phone number, date of birth, Social Security number and driver's license number. Washington's record adds passport numbers, and Texas adds financial information. Motility says it has no evidence of actual misuse.

How many people were affected?

Regulator	What it counts	Number
Texas attorney general	Texans (October 2026 posting)	194,755
Washington attorney general	Washingtonians (September 2025 notice)	8,369
Indiana attorney general	Indiana residents (2025 report)	8,160
Indiana attorney general	People affected in total (2025 report)	766,000
Oregon Department of Justice	People affected in total	766,670

Two records give a total, and they differ by 670. Indiana's 2025 report lists 766,000 people in total and 8,160 Indiana residents, with notice on September 29, 2025 and a breach date of August 11, 2025, the same dates as Oregon's 766,670. It is the seventeenth-largest total in Indiana's 2025 report, the place it holds in the largest data breaches of 2025.

What is Motility offering?

Twelve months of LifeLock identity monitoring, offered to everyone who may have been affected.

Item	Detail from the letter
Provider	LifeLock
Length	12 months
Who can enroll	Everyone who may have been affected

What the documents leave open

• Which dealers' customers were involved.
• How the attacker got in, and who was behind the malware.
• Whether the October 2026 Texas report reflects a second round of notices.