ERS Data Breach Exposes Payment Card and Personal Information in Cybersecurity Incident On December 15, 2025, Event Rental Systems (ERS) disclosed a cybersecurity breach involving unauthorized access to customer data. The incident occurred when an attacker injected malicious code into certain modules of ERS’s customer websites, potentially compromising sensitive information. Affected data includes personally identifiable information (PII) such as contact details, payment card numbers, CVV codes, and expiration dates. The exact number of impacted individuals remains undisclosed. Lynch Carpenter LLP, a national class action law firm, is investigating potential legal claims against ERS on behalf of those affected. The firm, which specializes in data privacy litigation, has urged individuals who received breach notifications in the past 30 days to seek legal review. ERS has not provided further details on the breach’s scope, timeline, or remediation efforts. The incident highlights ongoing risks to payment processing systems and third-party integrations in the events industry.