Hertz Data Breach Exposes Sensitive Customer Information Hertz recently disclosed a data breach that may have compromised sensitive personal identifiable information (PII) stored in its systems. On June 29, 2025, the company detected a network disruption, prompting an internal investigation. By July 3, 2025, Hertz confirmed that an unauthorized third party had accessed and potentially acquired customer data. After a months-long review, Hertz completed its assessment on November 7, 2025, determining that exposed information varied by individual but included names and Social Security numbers. On December 9, 2025, the company began notifying affected individuals via mail, detailing the specific data impacted and offering 12 months of complimentary credit monitoring services. The breach notice was filed with the Attorney General of Maine, where state residents received formal disclosure. Hertz has not publicly attributed the incident to a specific threat actor or attack vector. The full scope of affected individuals remains undisclosed.

The Hertz Corporation reported a data breach involving Cleo Communications US, LLC on February 10, 2025. The breach was due to unauthorized access exploiting vulnerabilities in Cleo's platform, which occurred in October and December 2024, potentially impacting personal information of certain individuals, including the recipient of this notice. The specific number of affected individuals and types of information compromised are currently unknown.