ransomware Credible South Africa (ZA) automotive

Rola Motor Group listed by the The Gentlemen ransomware group

Rola Motor Group

📅 20 January 2026
CompanyRola Motor Group
CountrySouth Africa (ZA)
Sectorautomotive
Breach date2026-01-20
People affectedNot disclosed
Ransomware groupthegentlemen
Data typescustomer data, vehicle records, corporate information

Overview

The Gentlemen ransomware group has listed Rola Motor Group, a South African vehicle dealer group, on its leak site. The group sells new, demo and pre-owned vehicles and offers online finance pre-approval. The listing appeared on 20 January 2026. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the dealer group. Automotive dealerships hold customer records, vehicle and finance histories and corporate information, which are the likely contents of any exfiltration.

Risks for affected individuals

  • Customer personal data may be exposed.
  • Finance records could enable fraud.
  • Employees' information may be included.

What remains unknown

  • The volume of records involved.
  • The exact contents of the leak.
  • Whether the data has been published elsewhere.

What affected people should do

Customers should monitor their accounts and be cautious of unsolicited communications. Rola should notify affected customers and staff, review its systems, and report the incident to South African authorities.

Sources

  • http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion