This week car rental company Hertz notified its users of a wide-ranging data breach that exposed some customers' personal information.
On Monday,Gangnam Daughter in law (2019) April 14, TechCrunch reported the appearance of a Notice of Data Incident on the Hertz website. According to the notice, personal information including names, contact information, date of birth, credit card information, driver's license information, and "information related to workers' compensation claims" were potentially exposed in the data breach through an external vendor named Cleo.
Additionally, Social Security numbers, government IDs, passport information, Medicare or Medicaid IDs, and medical information from car accident claims may also have been stolen from "a very small number of individuals," said the notice.
Hertz discovered the breach on February 10, and customer data was stolen in October 2024 and December 2024.
The notice did not say how many customers had their personal information exposed. However, according to a copy of the notice issued to Maine residents (published by the Office of the Maine Attorney General), the breach affected 3,409 customers in Maine alone. That means the true number of impacted individuals is likely far larger, especially considering that notices were also issued to customers in Australia, Canada, New Zealand, the United Kingdom, and beyond.
A spokesperson for Hertz declined to share specific numbers but said "it would be inaccurate to say millions of customers are affected."
The breach came from a Hertz vendor called Cleo, which manages file-sharing platforms for the company. "On February 10, 2025, we confirmed that Hertz data was acquired by an unauthorized third party that we understand exploited zero-day vulnerabilities within Cleo’s platform in October 2024 and December 2024," read the notice. Hertz didn't provide any further specifics about the hack or hackers, but during those same months, cybersecurity firm Huntress reported "evidence of threat actors exploiting this [Cleo software]." Around that same time, ransomware group Clop claimed responsibility for data theft attacks targeting Cleo's servers.
In the notice, Hertz said it was "not aware of any misuse of personal information for fraudulent purposes in connection with the event." But it encouraged customers to "remain vigilant" of any instances of data breaches and shared resources on how to monitor account statements and credit reports, including how to place a fraud alert or credit freeze on their accounts. Some Hertz customers will also be offered "two years of identity monitoring services" free of charge.
UPDATE: Apr. 15, 2025, 5:30 p.m. EDT This story has been updated with new information from a Hertz representative.
Topics Cybersecurity Privacy
'Marvel Rivals' is a fun, but forgettable 'Overwatch' ripoffAustralian Olympic breakdancer Raygun calls viral response 'pretty devastating'Free Max subscription (with ads) with DashPass annual planWhere to preWashington Mystics vs. Minnesota Lynx 2024 livestream: Watch live WNBABest Instacart deal: Save up to 25% during BackBest skincare deals: Save on beauty products from moisturizer to cleanserStephen King drops cryptic Dark Tower hint on XGoogle Chrome is killing the uBlock Origin ad blocker extensionIf aliens harnessed solar power, could we detect them? NASA investigated.Pixel 9 Pro XL: Google announces new third phone that joins Pixel 9 and Pixel 9 ProThe best camping deals at Amazon this week include coolers, tents, and moreNYT mini crossword answers for August 11Google Pixel Buds Pro 2: How to preOlympics 2024 closing ceremony: How to watchBest unlocked phone deals for the week of August 14, 2024By a technicality, August's full moon is blue. Here's why.Pixel 9 Pro XL vs. iPhone 15 Pro Max: What are the differences?X must pay $600K to employee who didn't click yes to work 'hardcore'ChatGPT Voice Mode is capable of some freaky stuff — but here's how OpenAI is tackling it. Paris Match: A Puzzle by Dylan Hicks Elena Ferrante‘s Children’s Book Is Being Translated and It Sounds Terrifying The 10 best and funniest tweets of the week, including a NOT haunted chair and a recycling bin Adventures at the Ninety Smart scale comparison: Fitbit vs. Withings vs. Garmin Whiting Awards 2016: Mitchell S. Jackson, Fiction Prime Day headphone deals October 2023: Sony, Bose, Apple This Disturbing 1936 Cartoon Tells Springtime’s Origin Story Ben Lerner on John Ashbery Ryan Gosling's Ken in 'Barbie' floods the internet with thirsty memes Little Man of Nuremberg: Wonder in the Age of Matthias Buchinger In Proust’s Bedroom: If These (Cork David Szalay Wins Plimpton Prize; Chris Bachelder Wins Southern Prize My Brief and Puzzling Career As a Security Guard Who Are You Calling “Delinquent”? On the Language of Debt Alert: Mr. Darcy’s Dripping Wet Shirt Is Coming to the USA James Tate’s Last Poem, Found in His Typewriter Listen to James Baldwin Read from “Another Country” Whiting Awards 2016: J. D. Daniels, nonfiction 200+ October Prime Day deals still live on Amazon: Apple AirPods, Nintendo Switch, and more
1.9581s , 10136.34375 kb
Copyright © 2025 Powered by 【Gangnam Daughter in law (2019)】,Charm Information Network