U-Haul International, Inc.
bd_eaed14df91a513cc · schema v1 · pii pii-v1
Full breach record for U-Haul International, Inc. →4 incidents on fileU-Haul International notified consumers of a December 5, 2023 incident where unauthorized parties used legitimate credentials to access a customer reservation system. Affected data included names, dates of birth, and driver's license numbers. No payment card data was compromised. U-Haul engaged a cybersecurity firm, reset passwords, and offered one year of Experian IdentityWorks.
J jump to incidentP pin to compareR raw source
Incident timeline
Dec 5, 2023
Discovered
Feb 22, 2024
Filed
Linked disclosures
Why this link?Regulatory filings (8) · sorted by filing gap
- California State AGbd_1819513f52a2ee752024-02-22Candidate
- New Hampshire State AGbd_21049826afecbe0c2024-02-22Verified
- Massachusetts State AGbd_4db35a964d6781592024-02-22Verified
- Indiana State AGbd_700fc89b40abfc602024-02-22Verified
Show 4 more filings ↓Show fewer ↑up to 21d gap
- Oregon State AGbd_a4861d7cc89712be2024-02-22Verified
- Washington State AGbd_bc9049d2d7ad39372024-02-22Verified
- Maine State AGbd_bd22cab7f871d7212024-02-22Verified
- Illinois State AGbd_3010c398a2d854e72024-02-01 · +21dVerified
Filing propagation · 9 filings · 9 states
View merged incident ↗Pattern: first filing Feb 1 (IL), last Feb 22 (VT) — a 21-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.