Event Rental Systems Data Breach

Event Rental Systems (ERS), a provider of event rental software, recently experienced a security breach affecting customer payment card data. Unauthorized code inserted into customer websites was designed to collect sensitive information during transactions. If you were impacted, you may be eligible for compensation through a class action lawsuit. Read on for details and your options.

Event Rental Systems
Date of Breach: December 15, 2025
CAU logo

Who was affected:

Clients of Event Rental Systems

Impacted Data:

Name

Contact Information

Payment Card Number (ending in the last four digits)

CVV (Card Verification Value)

Expiration Date

Event Rental Systems (ERS), a provider of customizable event rental software, recently disclosed a data breach that compromised the personal information of its customers. The breach occurred between October 2024 and October 2025, when unauthorized code was inserted into certain customer websites.

Event Rental Systems (ERS) Data Breach Investigation

On December 15, 2025, Event Rental Systems (ERS) revealed a security breach that affected its customers’ payment card information. Unauthorized code was inserted into customer websites to collect sensitive payment card data during online transactions. This code remained undetected for nearly a year, from October 2024 until October 2025, before it was discovered and removed.

ERS took immediate action to address the breach by working with a forensic firm to investigate the issue and identify how the malicious code operated. The company also notified law enforcement and the card brands about the breach. Importantly, ERS confirmed that no Social Security numbers, state identification numbers, or bank account information were compromised. However, payment card details—including card numbers, CVV, and expiration dates—were affected for some customers.

ERS has since strengthened its security measures to prevent similar breaches in the future and has made credit monitoring and identity restoration services available to those impacted by the incident. Affected individuals are encouraged to take advantage of these services to monitor for any unauthorized activity related to their personal information.

When Did This Breach Occur?

The breach occurred between October 2024 and October 2025. During this time, unauthorized code was embedded into the websites of certain ERS customers. This code was specifically designed to collect sensitive payment card data during online transactions.

What Information Was Breached?

The breach exposed the following personal information:

  • Name

  • Contact Information

  • Payment Card Number (ending in the last four digits)

  • CVV (Card Verification Value)

  • Expiration Date

However, the breach did not affect:

  • Social Security Number

  • State Identification Number

  • Bank Account Information

What You Can Do

If you were affected by this breach, there are several steps you can take to protect your personal information and minimize the risk of identity theft:

  1. Enroll in the Complimentary Credit Monitoring Service
    ERS is offering one year of complimentary credit monitoring and identity restoration services through Experian. You must enroll by February 28, 2026, using the unique code sent to you by ERS.

  2. Monitor Your Financial Accounts
    Regularly review your credit card and bank account statements for any unauthorized transactions. Setting up alerts with your financial institutions can help you catch suspicious activity early.

  3. Stay Vigilant for Identity Theft
    Always be on the lookout for signs of identity theft. If you notice any suspicious activity or believe you are a victim of fraud, contact local authorities and take steps to report the issue.

  4. Check Your Credit Report
    You can request a free copy of your credit report from each of the three major credit bureaus (Experian, Equifax, and TransUnion) to ensure there are no fraudulent accounts opened in your name.

File a Data Breach Lawsuit Against Event Rental Systems (ERS)

If you received a data breach notification from ERS or believe your personal information was compromised in this breach, you may be eligible to file a lawsuit. Affected individuals can join a class action lawsuit to seek compensation for damages resulting from the breach.

Class action lawsuits allow individuals to come together and hold large corporations accountable for their actions. If you were impacted by this breach, it’s important to understand your legal options and explore whether you have a case for compensation.

Contact us today at Class Action U, where we can connect you with experienced attorneys specializing in data breach cases. Our partners can help you assess your eligibility to participate in a class action lawsuit and help you recover the compensation you deserve.

Don’t wait, fill out our quick, easy, and secure form to get started with a free consultation. There’s no cost to speak with our legal partners, and no obligation to proceed after your consultation. If you’ve been affected, now is the time to act.

Subscribe To Our Newsletter

New cases and investigations, settlement deadlines, and news straight to your inbox.

This field is for validation purposes and should be left unchanged.
Other Data Breaches
Date of Breach: Not Specified
Date of Breach: May 17, 2025, to July 11, 2025
Date of Breach: December 15, 2025

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.