The popular car rental company Hertz has confirmed that the Hertz, Thrifty and Dollar rental car brands fell victim to the Cleo zero-day data theft attacks that occurred late last year. This data breach, which occurred in October and December 2024 was confirmed on February 10, 2025, and could include critical personal information.
As reported by BleepingComputer, the personal data that was stolen could potentially include customer names, contact information, dates of birth, credit card information, drivers licenses, and possibly information related to workers compensation claims. However, customers' Social Security numbers, government identification numbers, passport information, Medicaid or Medicare ID or injury related information associated with any vehicle accident claims may have also been accessed in this breach.
