Rola Motor Group listed by the The Gentlemen ransomware group
Rola Motor Group
Overview
The Gentlemen ransomware group has listed Rola Motor Group, a South African vehicle dealer group, on its leak site. The group sells new, demo and pre-owned vehicles and offers online finance pre-approval. The listing appeared on 20 January 2026. At the time of analysis, the group's leak page was not reachable.
What was published
The group claims to have exfiltrated data from the dealer group. Automotive dealerships hold customer records, vehicle and finance histories and corporate information, which are the likely contents of any exfiltration.
Risks for affected individuals
- Customer personal data may be exposed.
- Finance records could enable fraud.
- Employees' information may be included.
What remains unknown
- The volume of records involved.
- The exact contents of the leak.
- Whether the data has been published elsewhere.
What affected people should do
Customers should monitor their accounts and be cautious of unsolicited communications. Rola should notify affected customers and staff, review its systems, and report the incident to South African authorities.
Sources
- http://tezwsse5czllksjb7cwp65rvnk4oobmzti2znn42i43bjdfd2prqqkad.onion