Hertz Cyber Breach via Vendor Vulnerability Exposes Customer Data

April 15, 2025, 7:20 am

Two separate stories report on a significant cybersecurity incident involving Hertz. Hackers exploited vulnerabilities in a third‑party file transfer system to access sensitive customer data, including credit card details and driver’s license information. Both reports underscore how the zero‑day attack, executed via compromised Cleo products, has exposed critical flaws in vendor network security, prompting concerns over data protection practices for large multinational companies.

cnet.com / Hertz Data Breach Included Credit Card, Personal Data: Here's What You Should Know

The car rental giant said a hacking incident involving a company it works with exposed its customers' personal information.

theregister.com / Where it Hertz: Customer data driven off in Cleo attacks

Car hire biz takes your privacy seriously, though Car hire giant Hertz has confirmed that customer information was stolen during the zero-day data raids on Cleo file transfer products last year.…

theverge.com / Hertz says hackers stole customer credit card and driver’s license data

Car rental giant Hertz is alerting customers that personal information including credit card details and Social Security numbers may have been stolen in a data breach that impacted one of the firm’s vendors. In a notice posted to its website, Hertz says that company data “was acquired by an...

3 stories from 3 sources in 19 hours ago ... #cybersecurity #dataprivacy #infosec #cloudsec #big-data

Related Tags

Hertz Cyber Breach via Vendor Vulnerability Exposes Customer Data

Related Tags

Cybersecurity

Data Privacy

IT Security

Cloud Security

Big Data