Hertz confirmed the breach involved data stored by Cleo Communications, a vendor used by Hertz for file transfers. Hackers exploited security flaws in Cleo's system in October and December 2024, according to the company.
Hertz verified on Monday, Feb. 10, that an "unauthorized third party" accessed customer data. The company completed its investigation on Wednesday, April 2, and began notifying affected customers.
Information exposed in the breach may include names, contact details, birthdates, credit card numbers, and driver's license records.
"A very small number of individuals may have had their Social Security or other government identification numbers, passport information, Medicare or Medicaid ID (associated with workers' compensation claims), or injury-related information associated with vehicle accident claims impacted by the event," Hertz said.
According to Hertz, there's no evidence the stolen data has been used for fraud. The company is offering two years of free identity monitoring or dark web monitoring through Kroll Monitoring.
Hertz also said Cleo has since addressed the security flaws. The breach was reported to law enforcement and regulators.
The company also urged customers to monitor their financial accounts and credit reports for any suspicious activity.
Anyone with questions about the breach can call Hertz at 866-408-8964.
Click here to follow Daily Voice Mamaroneck and receive free news updates.