UPDATED:    April 15, 2025

Hertz Data Breach Lawsuit

Data Breach Summary

Hertz Corporation

Who Was Affected
Customers of Hertz Corporation
Impacted Data
Names, dates of birth, address, payment card information, workers’ compensation claims, Government-issued IDs, and Social Security numbers
Date of Breach
October to December 2024
Have you been affected by Hertz Corporation's data breach?

The Hertz Corporation, including its brands Hertz, Dollar, and Thrifty, is notifying customers about a significant data breach involving Cleo Communications US, LLC (“Cleo”), a vendor providing a file transfer platform for the company. Affected individuals are urged to stay vigilant by regularly reviewing their personal information and monitoring their credit reports for any suspicious activity.

Hertz Corporation Data Breach Details

In October and December 2024, Cleo Communications, a third-party vendor, experienced an exploitation of zero-day vulnerabilities in its platform. The breach was discovered by Hertz on February 10, 2025, and the company promptly began investigating the incident to assess the extent of the breach and identify potentially affected individuals. The breach was reported to law enforcement and relevant regulatory bodies.

As a precaution, Hertz has partnered with Kroll to offer two years of free identity monitoring to affected individuals.

What Information Was Compromised?

The compromised data may include:

  • Full names
  • Social Security numbers
  • Addresses
  • Dates of birth
  • Driver’s licenses
  • Payment card information
  • Workers’ compensation claims
  • Government-issued IDs

While most victims are officially notified through a “Notice of Data Breach” in the mail, the consequences—such as fraudulent transactions and identity theft—can begin before the official notice arrives.

How to Know if You Were Affected

If you received a data breach notification from Hertz Corporation, your personal information may have been compromised. The breach impacted customers in multiple countries, including Australia, Canada, the European Union, New Zealand, the United Kingdom, and the United States. Specific states, such as California and Maine, have been affected, with over 3,400 customers in Maine alone.

While Hertz has stated that no breach was detected in its internal systems, the attack involved the Cleo platform, which Hertz uses for limited purposes. This breach was part of a larger ransomware campaign by the Clop gang, who exploited vulnerabilities in Cleo’s enterprise file transfer platform.

Steps to Take if You Were Affected by the Hertz Corporation Data Breach

If you believe your personal information has been compromised in the Hertz Corporation data breach, it’s important to act quickly to protect yourself. Begin by reviewing the data breach notification from Hertz and checking your accounts for any suspicious activity. 

While the breach may have occurred months ago, immediate action can help minimize potential damage, including identity theft or fraudulent transactions. Following these steps can provide you with the necessary protection and peace of mind during this challenging time.

Stay Alert for Phishing Scams

Scammers may exploit the data breach by posing as Hertz Corporation. Be cautious of unexpected emails, texts, or calls requesting personal information. Always verify suspicious communications directly with the company through official channels.

Monitor Your Credit and Financial Accounts

Regularly check your bank statements, credit card activity, and credit reports for unauthorized transactions. Set up account alerts to detect suspicious activity early. Take advantage of free credit reports and carefully review them for unfamiliar accounts or discrepancies.

Consider Freezing Your Credit

For added security, request a credit freeze from all three major credit bureaus. This prevents new accounts from being opened in your name while still allowing you to use existing credit. You can temporarily lift the freeze when necessary, such as when applying for credit.

Class Action U Can Help

Class Action U, in partnership with KO Lawyers, is helping individuals affected by the Hertz Corporation data breach explore their legal options. If your personal information was compromised, you may be eligible for compensation.

Potential compensation may cover:

  • Loss of privacy
  • Time spent addressing the breach
  • Out-of-pocket expenses
  • Emotional distress

A successful lawsuit could not only secure compensation but may also compel Hertz Corporation to implement stronger security measures and prevent future breaches. Contact Class Action U today to determine your eligibility for a data breach class action lawsuit and explore the compensation that may be available to you.

Related Posts