Kantrowitz, Goldhamer & Graifman, P.C. is actively investigating a data breach involving The Hertz Corporation, which also includes affiliated rental brands Dollar and Thrifty, concerning a cybersecurity incident that exposed highly sensitive customer information.
The breach stems from a vulnerability in the systems of Cleo Communications, a third-party file transfer service used by Hertz. Between October and December 2024, unauthorized actors exploited a zero-day vulnerability, allowing access to files containing personal information of customers who rented vehicles from Hertz, Dollar, and Thrifty. The Clop ransomware group has claimed responsibility for the breach and is believed to have posted data from the incident online.
Hertz publicly acknowledged the breach on February 10, 2025, and has since notified regulatory authorities and impacted individuals across the United States.
Information that may have been compromised includes:
- Full names
- Dates of birth
- Email and physical addresses
- Driver’s license numbers
- Credit and debit card information
- Social Security numbers (in some cases)
- Passport numbers, Medicare/Medicaid IDs, and workers’ compensation data (for some affected individuals)
The exposure of protected health information, including Medicare/Medicaid identifiers and workers’ compensation data, elevates the severity of this breach and may place impacted individuals at increased risk for identity theft, medical fraud, and insurance exploitation. While Hertz is not a healthcare provider, the breach involved documents submitted during insurance claims, accident reports, or customer service incidents where such information may have been collected and stored.
If you have received a NOTICE OF DATA BREACH regarding this incident and wish to discuss your rights or possible participation in a class action lawsuit, please contact class action attorneys Melissa R. Emert, Esq. or Gary S. Graifman, Esq. at: Kantrowitz, Goldhamer & Graifman, P.C. 135 Chestnut Ridge Road – Suite 200 Montvale, NJ 07645 Phone: (866) 896-0935 Email: [email protected] or [email protected]
Consumers who have been impacted are encouraged to secure their credit reports, enroll in identity theft protection, and contact our firm to learn more about their legal options.