In today’s digital world, our most sensitive information is often only as safe as the systems that store it.

A recent security incident involving a major car rental company has raised fresh concerns about how easily personal data can fall into the wrong hands.

If you’ve rented a car in the past few months, your driver’s license—or worse—may have been compromised.

Here's what you need to know to stay protected.


Hertz, the national car rental brand, has confirmed that a data breach affecting its systems occurred between October and December 2024.

The company described the number of impacted individuals as a "very small" portion of its customer base, but the information involved is anything but minor.


The breach was linked to Cleo Communications, a third-party software vendor used by Hertz to manage internal data.

According to Hertz, cybercriminals exploited a vulnerability in Cleo’s system to access customer records.



Read more: Travel nightmare: Lost or stolen license? You never know when this might happen.

The data exposed in the breach includes personal and potentially sensitive details. Among them:

• Driver’s license numbers
• Social Security numbers
• Passport details
• Medicare or Medicaid IDs
• Birthdates, credit card data, and accident claim information

In a statement, Hertz emphasized that not all affected individuals had every type of data compromised, but some customers did face exposure of multiple types of identification.

In response, Hertz has begun notifying affected customers and is offering two years of free identity-monitoring and dark web surveillance services through Kroll.



The company is also cooperating with law enforcement and is in the process of notifying state and federal regulators.

Cleo Communications, the software vendor at the center of the breach, has reportedly taken steps to fix the vulnerability that allowed the attack to occur.

This breach adds to a growing list of customer complaints about Hertz, including disputes over surprise charges and refund delays.

One customer shared an experience of being charged $118 in refueling fees despite returning a full tank—and being unable to submit supporting evidence through a faulty dispute form.


If you’ve rented from Hertz, Dollar, or Thrifty in recent months, take these steps to safeguard your information:

1. Visit the official identity protection site listed in Hertz’s notice to enroll in monitoring services.
2. Review your credit reports and bank statements for suspicious activity.
3. Place a fraud alert or freeze on your credit if you believe your Social Security or financial data was accessed.
4. Contact Hertz directly via their designated hotline if you suspect you were affected: (866) 408-8964.

Read next: Driver hit with outrageous parking bill after towing car from their own home
Have you been impacted by this data breach or a similar incident? How do you stay on top of your digital security? Share your experience or tips in the comments below—because the more we know, the better we protect one another.