Hertz Data Breach Investigation | Class Action Lawyers

The class action data breach lawyers at The Lyon Firm are investigating a reported data breach at Hertz Corporation, potentially impacting the personal data of thousands of individuals. Contact our legal team to discuss how to protect yourself from fraud and identity theft following any data security incident that has compromised your personal information. We have filed numerous data breach lawsuits for victims seeking compensation and accountability and have settled cases on behalf of plaintiffs nationwide.

What Happened at Hertz Car Rental?

Hertz Corp, which also owns the Dollar and Thrifty car rental brands, has started notifying customers of a large-scale data breach that may have included a wide range of personal information.

The rental company said in a notice on its website that the breach relates to a cyberattack on one of its vendors. The statement says, “On February 10, 2025, we confirmed that Hertz data was acquired by an unauthorized third party that we understand exploited zero-day vulnerabilities within Cleo’s platform in October 2024 and December 2024.”

The stolen data reportedly includes customer names, dates of birth, contact information, driver’s licenses, payment card information, and workers’ compensation claims. Hertz said some customers had their Social Security numbers taken in the attack. The company has also disclosed the breach with several U.S. states, including California and Maine.

The targeted vendor in question, software maker Cleo, was apparently hacked last year by a prolific Russia-linked ransomware gang. Hertz was one of dozens of companies that used Cleo’s software the Clop ransomware gang claimed to have exploited a vulnerability in Cleo’s enterprise file transfer products. Clop later claimed that it stole data from over fifty companies.

If you have been contacted by Hertz regarding this data theft event, it is important to understand the risks moving forward. It is prudent to take certain measures to protect yourself and to contact an experienced attorney to consider the next steps.