Where it Hertz: Customer data driven off in Cleo attacks

Car hire giant Hertz has confirmed that customer information was stolen during the zero-day data raids on Cleo file transfer products last year. A breach notification was issued on Monday on behalf of Hertz, Dollar, and Thrifty brands, suggesting customers of all three Hertz Corporation-owned car hire businesses were affected …

[OhForF']

Timely warning

Thank you soooo much Hertz for a timely warning just 4 months after hackers got a copy of that data.

[An_Old_Dog]

Untrustworthy Kroll

Sure -- give your personal financial data to Kroll so they can monitor your accounts for potential fraud. This is the same Kroll which was phished and had peoples' financial data stored on their systems raided.

(One paragraph, then paywall)

https://www.theinsurer.com/cyber-risk/news/exclusive-kroll-breached-via-phishing-attack-that-disclosed-clients-account-2025-03-03/

[Michael Strorm]

Yo dawg, etc.

Looks like an opportunity for Xzibit to launch a fraud-checking service for fraud-checking services, so you can fraud check while you fraud check.

[Apocalypso - a cheery end to the world]

Cleo file transfer product

> Cleo file transfer product

Should have used MOVEit ... oh wait.

[YetAnotherXyzzy]

This is the same Hertz that has filed false police reports against its own customers. Hertz needs to die in a car crash.

https://viewfromthewing.com/hertz-shouldnt-emerge-from-bankruptcy-until-they-stop-filing-false-police-reports-against-customers/

[MachDiamond]

"This is the same Hertz that has filed false police reports against its own customers."

Anything that seems to add convenience is most likely to add risk. If you returned your hired car to a staffed location, had it checked in and left with a document that acknowledges the return, you will have an easier time not spending time in jail. Yes, I know that locations aren't staffed 24/7 and you have done a return plenty of times with no issues, do you want to risk the police showing up at your home or place of work and hauling you away for auto theft? How's your employer going to take that? Your arrest for grand theft auto record will not sit immediately next to the record of your being cleared of all charges so good luck on that new job hunt when a prospective employer gets a readout that shows you being arrested for auto theft a few years ago (about the amount of time a sentence would be).

If you will need to return a car after-hours, see what you can do to return it within hours and use public transportation until you leave. If none of that works, document everything like mad with loads of photos that are geo-tagged and time stamped. Besides avoiding a theft charge, you want to avoid having them claim you returned the vehicle with damage (when you didn't). If you thought the insurance would cover everything, think again. The trap to watch out for is "loss of use". The rental company will often have a clause that will bite you if you don't sign up for their insurance. You will get billed for every day the car is in the shop having work done. The cost to repair any damage might be trivial in comparison.

[Ken Moorhouse]

Customer data driven off in Cleo attacks

Other cars are available instead.