U-Haul International, Inc.

U-Haul International disclosed that an unauthorized party used legitimate credentials to access a system used by dealers and team members to track customer reservations. The incident occurred between July 20 and October 2, 2023, and was discovered on December 5, 2023. Affected data included names, dates of birth, and driver's license numbers. U-Haul engaged a cybersecurity firm, changed passwords, and is offering one year of identity protection services.

U-Haul International filed a breach notification with the New Hampshire Attorney General regarding an incident affecting customer data. The notification letter offers one year of Experian IdentityWorks services, indicating identity theft risk involving personal information. Specific details on the attack vector, dates, or number of affected individuals are not present in the provided attachment text.

U-Haul International, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2024-02-22. 1,130 Massachusetts residents were affected.

U-Haul International, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2023-07-20 and was reported on 2024-02-22. 968 Indiana residents were affected. 57,177 individuals affected in total.

U-Haul International, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2024-02-22. The breach occurred during 7/20/2023 - 10/2/2023. The breach was discovered on 12/5/2023. 57,177 individuals were affected. Notice was sent on 2/22/2024.

U-Haul International, Inc. notified Washington AG that unauthorized parties used legitimate credentials to access a customer reservation system between July 20 and October 2, 2023. The breach exposed names, DOBs, and driver's license numbers of 16,460 Washington residents. U-Haul engaged forensic investigators, reset passwords, and offered one year of credit monitoring.

U-Haul International, Inc. experienced an external system breach where an unauthorized party gained access to customer information. The compromised data includes names and driver's license or non-driver identification card numbers. The breach occurred between July 20, 2023, and October 2, 2023, and was discovered on December 5, 2023. Affected individuals were notified on February 22, 2024, and offered one year of credit monitoring and identity theft protection services from Experian.

U-Haul International notified consumers of a December 5, 2023 incident where unauthorized parties used legitimate credentials to access a customer reservation system. Affected data included names, dates of birth, and driver's license numbers. No payment card data was compromised. U-Haul engaged a cybersecurity firm, reset passwords, and offered one year of Experian IdentityWorks.

U-HAUL INTERNATIONAL filed a data-breach notice with the Illinois Attorney General in February 2024 (case 24-02-208). The register records the breach as discovered on December 5, 2023. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

U-Haul International, Inc reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-12-01. 1 Massachusetts residents were affected. The report records the breach type as electronic.

U-Haul International, Inc. notified the New Hampshire Attorney General of a cybersecurity incident affecting 7,948 NH residents. Unauthorized parties used compromised credentials to access a customer contract search tool between November 5, 2021, and April 5, 2022. The accessed data included names and driver's license/state ID numbers. U-Haul engaged a cybersecurity firm, secured the account, and provided one year of credit monitoring to affected individuals.

U-Haul International, Inc. notified customers that an unauthorized person accessed the customer contract search tool using compromised passwords. The incident involved access to names and driver's license/state ID numbers between November 5, 2021, and April 5, 2022. U-Haul engaged cybersecurity experts, reset passwords, and offered one year of Equifax identity theft protection.

U-Haul International, Inc. disclosed a cybersecurity incident in Delaware involving unauthorized access to a customer contract search tool. Between November 5, 2021, and April 5, 2022, an unauthorized party used compromised credentials to access rental contracts for 4,903 Delaware residents. The accessed data included names and driver's license numbers. No financial or payment card information was compromised. U-Haul engaged a cybersecurity firm, secured the account, and offered one year of free credit monitoring and identity theft protection services through Equifax.

U-Haul International, Inc. reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-09-09. 37,202 Massachusetts residents were affected. The report records the breach type as electronic.

U-Haul International, Inc. reported unauthorized access to a customer contract search tool using compromised credentials between Nov 2021 and Apr 2022. Detected July 12, 2022. 61,770 Washington residents affected; data included names, DOBs, and driver's licenses. U-Haul engaged forensic experts, reset credentials, and offered 1-year credit monitoring.

U-Haul International, Inc. notified customers that an unauthorized person accessed the customer contract search tool using compromised passwords. The incident involved access to customer names and driver's license/state ID numbers between November 2021 and April 2022. U-Haul engaged cybersecurity experts, reset passwords, and offered one year of Equifax identity theft protection.

U-Haul International, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2022-09-09. The breach occurred during 11/4/2021 - 4/5/2022. The breach was discovered on 9/7/2022. 2,195,831 individuals were affected. Notice was sent on 9/9/2022.

U-Haul International, Inc. disclosed that an unauthorized person accessed a customer contract search tool using compromised passwords between November 5, 2021, and April 5, 2022. The incident was detected on August 1, 2022. Affected data includes names and driver's license or state identification numbers. No payment card information was accessed. U-Haul changed passwords, engaged cybersecurity experts, and is offering one year of identity theft protection through Equifax.

U-Haul International, Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2021-11-05 and was reported on 2022-09-09. 36,557 Indiana residents were affected. 2,195,831 individuals affected in total.

U-Haul International, Inc. reported a data breach impacting 7,181 Maine residents. The breach, described as an external system hacking incident, occurred between November 5, 2021, and April 5, 2022, and was discovered on September 7, 2022. The compromised information includes names combined with driver's license or non-driver identification card numbers. U-Haul provided written notification to affected individuals on September 9, 2022, and offered one year of credit monitoring and identity theft protection services through Equifax.

U-Haul International, Inc. notified customers that unauthorized access to a customer contract search tool occurred between November 2021 and April 2022. Compromised credentials allowed access to rental contracts containing names and driver's license/state ID numbers. No payment card data was accessed. U-Haul changed passwords, engaged cybersecurity experts, and offered one year of Equifax identity theft protection.

U-Haul Co. of California reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2017-12-12. 1 Massachusetts residents were affected. The report records the breach type as electronic.

U-Haul Co. of California notified the NH Attorney General of a malware incident at an independent dealer, Solo Tire, affecting one NH resident. Data accessed included PII, driver's license, and payment card info. Incident occurred Jan-Oct 2017. Notifications sent Dec 12, 2017.

A computer workstation at Solo Tire, an independent U-Haul dealer in Orange, CA, was infected with malware targeting payment card data. Customers who reserved or rented equipment from January 10 to October 16, 2017 may have had name, address, phone, email, driver's license, birth date, and payment card details compromised. The incident was contained to the Solo Tire location.