THE HERTZ CORPORATION

The Hertz Corporation issued a supplemental breach notification to Delaware regarding a cybersecurity incident involving third-party vendor Cleo Communications US, LLC. On February 10, 2025, Hertz confirmed that an unauthorized third party exploited zero-day vulnerabilities in Cleo's file transfer platform in late 2024 to acquire Hertz data. The incident involved customer contact information. Hertz reported the event to law enforcement, engaged Kroll for two years of identity monitoring, and is notifying relevant regulators.

The Hertz Corporation notified individuals of a data breach involving its third-party vendor, Cleo Communications US, LLC. An unauthorized third party exploited zero-day vulnerabilities in Cleo's file transfer platform in October and December 2024 to acquire Hertz data. Hertz confirmed the incident on February 10, 2025, and engaged Kroll to provide two years of identity monitoring services. The breach potentially exposed customer names, contact information, and government identifiers.