![](\"https:\/\/www.insurancejournal.com\/app\/uploads\/2022\/12\/Hertz-Bloomberg-580x387.jpg\")
<\/p>\n![](\"https:\/\/www.insurancejournal.com\/app\/uploads\/2022\/12\/Hertz-Bloomberg-scaled.jpg\")
<\/div>\nHertz is alerting customers to a data breach involving drivers\u2019 license numbers and other personal information following a hack in its supply chain.<\/p>\n
The car-rental company said in a posting<\/a> on its website that it completed an analysis of the incident on April 2 and determined the affected information may include names, credit-card data, driver\u2019s license information and details related to workers\u2019 compensation claims. The company confirmed in February that attackers obtained Hertz data during a security incident at a vendor, an enterprise software firm Cleo Communications US, according to the posting.<\/p>\n \u201cOur forensic investigation has found no evidence that Hertz\u2019s own network was affected by this event,\u201d according to a statement provided by a company spokesperson on Monday. \u201cHowever, among many other companies affected by this event, we have confirmed that Hertz data was acquired by an unauthorized third party that we understand exploited zero-day vulnerabilities within Cleo\u2019s platform in October 2024 and December 2024.\u201d<\/p>\n Hertz uses Cleo for limited purposes, the car-rental company said.<\/p>\n A ransomware group last year leveraged Cleo technology to target some of the company\u2019s partners, according to the cybersecurity firm Huntress. Cleo in December released an update<\/a> to address the software flaws.<\/p>\n A representative for Cleo didn\u2019t immediately respond to a request for comment.<\/p>\n TechCrunch previously reported on the security incident.<\/p>\n Photo: Cars on a Hertz car rental lot in Berkeley, California in 2021. Photographer: David Paul Morris\/Bloomberg<\/em><\/p>\n Topics<\/span> Cyber<\/a> <\/p>\n<\/p><\/div>\n Was this article valuable?<\/p>\n<\/p><\/div>\n