Take These 5 Steps Immediately After the Hertz Data Breach

Car hire giant Hertz recently confirmed a significant data breach after hackers exploited vulnerabilities in software provided by vendor Cleo.

The breach, executed by the notorious Russia-linked Clop ransomware gang, compromised sensitive customer information through zero-day vulnerabilities found in Cleo’s widely used enterprise file transfer products in October and December 2024.

The compromised data varies by region but generally includes customers’ names, dates of birth, contact details, driving licence numbers, payment card information, and workers’ compensation claims. Hertz has also confirmed that a smaller number of customers had their Social Security numbers and other government-issued identification details exposed in the breach.

Affected countries and regions include the United Kingdom, European Union, United States, Canada, Australia, and New Zealand.

Cybersecurity expert Akash Mahajan, Founder and CEO at Kloudle, recommends these five immediate steps if you suspect your data may have been exposed by the Hertz data breach:

1. Be Vigilant Against Targeted Phishing Scams

Cybercriminals frequently leverage leaked customer data to launch sophisticated phishing attacks. Remain cautious of unsolicited emails, texts, or calls claiming to be from Hertz or affiliated companies, particularly those seeking personal details or urging immediate action.

2. Immediately Change Your Passwords

Even if passwords weren’t directly compromised, attackers often attempt to gain unauthorised access using leaked personal information. Promptly update your Hertz account password and any other accounts using similar credentials, using strong, unique passwords securely managed through a reputable password manager.

3. Enable Multi-Factor Authentication (MFA)

Activate MFA without delay on all accounts linked to your personal and financial information. Authenticator apps such as Google Authenticator are strongly recommended over SMS-based methods, offering enhanced security and protection.

4. Closely Monitor Account Activity

Regularly review your Hertz account and linked payment methods for any unusual or unauthorised transactions. Set up instant alerts from your bank or credit card providers to swiftly identify and respond to suspicious activities.

5. Consider Identity Theft Protection

Sign up for identity monitoring services and routinely check your credit reports and financial statements for anomalies. You might also consider placing fraud alerts or registering for protective services to reduce the risk of ongoing misuse of your personal information.

Mahajan adds:

“Vendor-related breaches like this one highlight the interconnected risks businesses and consumers face today. Cybercriminals can exploit stolen data for months or even years after the initial incident, emphasising the need for constant vigilance and proactive cybersecurity measures.”