This week car rental company Hertz notified its users of a wide-ranging data breach that exposed some customers' personal information.
On Monday,Gary Eberhart Archives April 14, TechCrunch reported the appearance of a Notice of Data Incident on the Hertz website. According to the notice, personal information including names, contact information, date of birth, credit card information, driver's license information, and "information related to workers' compensation claims" were potentially exposed in the data breach through an external vendor named Cleo.
Additionally, Social Security numbers, government IDs, passport information, Medicare or Medicaid IDs, and medical information from car accident claims may also have been stolen from "a very small number of individuals," said the notice.
Hertz discovered the breach on February 10, and customer data was stolen in October 2024 and December 2024.
The notice did not say how many customers had their personal information exposed. However, according to a copy of the notice issued to Maine residents (published by the Office of the Maine Attorney General), the breach affected 3,409 customers in Maine alone. That means the true number of impacted individuals is likely far larger, especially considering that notices were also issued to customers in Australia, Canada, New Zealand, the United Kingdom, and beyond.
A spokesperson for Hertz declined to share specific numbers but said "it would be inaccurate to say millions of customers are affected."
The breach came from a Hertz vendor called Cleo, which manages file-sharing platforms for the company. "On February 10, 2025, we confirmed that Hertz data was acquired by an unauthorized third party that we understand exploited zero-day vulnerabilities within Cleo’s platform in October 2024 and December 2024," read the notice. Hertz didn't provide any further specifics about the hack or hackers, but during those same months, cybersecurity firm Huntress reported "evidence of threat actors exploiting this [Cleo software]." Around that same time, ransomware group Clop claimed responsibility for data theft attacks targeting Cleo's servers.
In the notice, Hertz said it was "not aware of any misuse of personal information for fraudulent purposes in connection with the event." But it encouraged customers to "remain vigilant" of any instances of data breaches and shared resources on how to monitor account statements and credit reports, including how to place a fraud alert or credit freeze on their accounts. Some Hertz customers will also be offered "two years of identity monitoring services" free of charge.
UPDATE: Apr. 15, 2025, 5:30 p.m. EDT This story has been updated with new information from a Hertz representative.
Topics Cybersecurity Privacy
South Koreans rush to remote town on North Korean border to play 'Pokémon Go'Peter Dinklage shares what Tyrion was thinking about THAT hookAcademy postpones adding a 'popular' movie category'Pokémon Go' is already the biggest U.S. mobile game everHurricane Florence is our first major hurricane of the 2018 seasonThe interactive rain website that brings me temporary peace onlineDesperate Chinese Pokémon trainers are buying Australian and US App Store accounts on TaobaoInstagram adds personalized emoji shortcutsMelting glaciers leave behind three new islands in the Arctic OceanNokia might be working on a phone with five rear camerasBMW makes sure we can’t escape voice assistants while drivingUber gives drivers voice control so they can keep their hands on the wheelUber gives drivers voice control so they can keep their hands on the wheelLime just dropped some serious eBMW makes sure we can’t escape voice assistants while drivingLatinas hold only 2% of STEM jobs. These 5 women are working to fix that.This greaseTwitter CEO Jack Dorsey's hearing on conservative shadowbanning was a messThe FBI has quietly gathered 400,000 iris scansPeter Dinklage shares what Tyrion was thinking about THAT hook 'Downton Abbey' movie revolves around a royal visit Apple iPad mini 5 teardown reveals RAM upgrade Justin Bieber apologizes for his very bad April Fools' pregnancy prank Swiping is the new cheating—or is it? Why does the Duolingo owl scare me more than my high school Spanish teacher ever did? Volkswagen's self Startup brings the dollar store online Creepy 'Joker' poster hints at madness and violence Google Duplex comes to Android and iOS, so you might actually use it now Everyone is giving up on GoPro South Korea's first 5G service plans aren't cheap Monk is your average black cat...but with vampire fangs The Internet Archive rescues half a million lost MySpace songs 'Pet Sematary' terrifies with very real, very adult fears: Review This little Iron Man robot is the kind of ‘Avengers: Endgame’ merch we dig Apple might not have 5G iPhone ready in time for 2020 launch Facebook backs away from asking for some users' email passwords Russian artists' book bags let you wear your favorite novel as a purse Australia passes tough social media laws regarding removal of violent content Elon Musk's favorite Autopilot feature just got updated
2.5371s , 8228.6171875 kb
Copyright © 2025 Powered by 【Gary Eberhart Archives】,Pursuit Information Network