Rola Motor Group listed by the thegentlemen ransomware group

<p>On 20 January 2026, the <strong>thegentlemen</strong> ransomware group listed <strong>Rola Motor Group</strong> on its dedicated leak site in South Africa. The group claims to have exfiltrated data from the organisation, a automotive organisation, before publishing the victim on its leak site.</p> <h2>What the source reveals</h2> <p>www.rola.co.za https://www.zoominfo.com/c/rola-motor-group/479741917 Rola Motor Group specializes in the sale of new, demo, and quality pre-owned vehicles, offering a seamless online finance pre-approval process. They provide services for buying and selling cars, as well as vehicle servicing across various brands. Their intended clients include individuals looking to purchase vehicles, sell their cars, or seek financing solutions. Established in 1963, Rola Motor Group is known for its exceptional customer service and a wide range of automotive solutions.</p> <h2>Risks</h2> <ul> <li>Exposure of sensitive organisational data including internal documents, communications, and operational records</li> <li>Operational disruption if business-critical systems and databases were affected by the attack</li> <li>Reputational damage and loss of stakeholder trust, potentially affecting ongoing business relationships</li> <li>Financial costs associated with incident response, forensic investigation, and system restoration</li> <li>Permanent loss of data integrity if backups were also compromised or encrypted</li> <li>Regulatory and legal consequences depending on data protection laws in the affected jurisdictions</li> </ul> <h2>What remains unknown</h2> <ul> <li>the volume and specific data types exfiltrated from the organisation</li> <li>the date of the initial intrusion and the attack vector used</li> <li>whether the organisation engaged with the attackers or paid any ransom demand</li> </ul> <h2>Conclusion</h2> <p>Ransomware attacks on automotive organisations can disrupt operations and expose sensitive data across supply chains. The affected organisation should conduct a thorough forensic investigation, notify relevant regulatory authorities, and communicate transparently with affected stakeholders. Organisations in South Africa should review their ransomware preparedness, including offline backup verification and incident response testing.</p>