Hello, technology enthusiasts! Here’s a juicy scoop for you.
The car rental titan, Hertz, has set off alarm bells by alerting its customers of a significant data breach affecting personal information and driver’s licenses.
This breach is tied to a cyberattack on one of Hertz’s vendors, Cleo Software, which occurred between October and December 2024.
The compromised data varies by region, with affected details including names, dates of birth, contact details, driver’s licenses, and payment card information. Unfortunately, some customers even had their Social Security numbers snagged during this breach.
Notices were sent out to customers in multiple areas including Australia, Canada, the European Union, New Zealand, and the UK, revealing the widespread impact.
In the United States, at least 3,400 customers in Maine were confirmed affected, but the total number of victims is likely much higher.
While Hertz’s spokesperson couldn’t provide an exact count of the victims, they clarified that saying millions were affected might be inaccurate.
The company attributes the breach to Cleo Software, which was previously targeted by a notorious Russia-linked ransomware group, Clop, infamous for exploiting vulnerabilities in their file transfer products.
Hertz has assured that there is no evidence suggesting that their own network was infiltrated. However, unauthorized access to Hertz data through vulnerabilities in Cleo’s system was confirmed.