HackingTransportation & LogisticsTransportationCapture Stored DataData ExfiltratedEmployee Data InvolvedDelayed DiscoveryPIIIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentMinorMediumResolved

SIXT RENT A CAR, LLC

bd_2d14740ac95a87ad · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Jul 6, 2022

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

79%

Full breach record for SIXT RENT A CAR, LLC →2 incidents on file

Sixt Rent-a-Car, LLC reported unauthorized access to its parent company's network between April 27–May 1, 2022. An unauthorized party obtained files from a file server containing current and former employee PII (names, SSNs, DOBs, driver's license/passport numbers, financial account numbers, health insurance info) as well as dependent minor data. Sixt engaged a cybersecurity firm, restored systems, and notified affected individuals on July 6, 2022, offering one year of Experian IdentityWorks credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Apr 27, 2022

Begins

Jul 6, 2022

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_1ad2364914ec4ccf2022-07-06Verified
Indiana State AGbd_854b3bfec7692c622022-07-06Verified

Name: SIXT RENT A CAR, LLC
norm: sixt rent a car

Name: SIXT RENT A CAR, LLC
norm: sixt rent a car
Domain: sixt.com
Industry: Vehicle Rental
Industry: Transportation & Logisticsllm

Discovered: —
Breach occurred: Apr 27, 2022 – May 1, 2022
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)Government IDFinancial accountHealth (basic)EmploymentMinor
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data StagedT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Filed notification with California Attorney General

During the incident: Began an investigation immediately upon identifying unusual network activity
Engaged a cybersecurity firm to assist with the investigation
Took measures to address the incident and to restore the systems
Conducted a careful review of the affected files to determine what information was involved
Arranged for affected individuals to receive a complimentary one-year membership to Experian's IdentityWorks credit monitoring service
Changes made: Working with our parent company to further enhance the security of our networks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 6 · first

Indiana State AGJul 6 · first

California State AGJul 6 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-554982
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 6, 2022
Raw hash: 19acd0a3d3e7c1daabb17ba2e32f7d6baed9e62d8fb3d5e1d2ab7415a7df1c5f

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entitySIXT RENT A CAR, LLC

Victim entitySIXT RENT A CAR, LLC

IncidentUnauthorized Access

Stated responseBegan an investigation immediately upon identifying unusual network activity

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov