Hertz recently announced that personal information tied to its Hertz, Dollar, and Thrifty brands may have been affected, and the data may have been stolen. You can get two years of free identity monitoring. If you have ever rented a car with Hertz, you should take note. Here are the details:

This incident is related to Hertz’s third-party vendor, Cleo Communications US, LLC (referred to as “Cleo”). Cleo provided a file transfer platform that Hertz used in limited circumstances.

On February 10, 2025, we confirmed that Hertz data had been accessed by an unauthorized third party, who leveraged a zero-day vulnerability in the Cleo platform that was found in October 2024 and December 2024. Hertz immediately began analyzing the impacted data to determine the scope of the incident and identify potentially affected individuals. On April 2, 2025, we completed the data analysis and found that the personal information involved in the incident may include: names, contact information, dates of birth, credit card information, driver’s license information, and workers’ compensation-related information. For a limited number of individuals, Social Security numbers or other government IDs, passport information, and Medicare or Medicaid IDs (related to workers’ compensation claims) may also have been affected.

Hertz takes the privacy and security of personal information seriously. As a result, Hertz confirmed that Cleo has taken steps to investigate the incident and resolve the issues identified. We reported the incident to law enforcement and are reporting it to relevant regulators. In addition, as a precautionary measure, Hertz has entered into an agreement with Kroll to provide potentially affected individuals with two years of free identity monitoring and dark web monitoring.

U.S. residents can register for identity monitoring here:

  • http://hufcuwxgqzil.kroll.com/（I tested it, and it appears everyone should be able to register and enroll）

Although Hertz has not yet found evidence of misuse of personal information as a result of this event, we still recommend that potentially affected individuals remain vigilant, for example, by regularly reviewing account statements, monitoring free credit reports, and reporting any unauthorized activity. Additional resources for your reference:

  • Individuals should stay alert and protect themselves by reviewing account statements and monitoring credit reports.
  • Under federal law, each individual is entitled to one free credit report every 12 months from each of the three major credit reporting companies. To get a free credit report, visit http://www.annualcreditreport.com or call 1-877-322-8228.
  • Individuals can place an initial or extended fraud alert on their credit files for free.
  • Individuals have the right to place a credit freeze on their credit reports to prevent credit bureaus from releasing information without the individual’s explicit authorization.

For more information, you may call (866) 408-8964. Customer service is available Monday through Friday, 6:00 a.m. to 8:00 p.m. Central Time, excluding major U.S. holidays.