--- title: "Know Your Breach: Hertz" description: "The Vector: The company attributed the breach to a vendor, software maker Cleo, which last year was at the center of a mass-hacking campaign by a prolific Russia-linked ransomware gang. Hertz is one of dozens of companies that used Cleo’s software at the time of their data thefts. The Clop ransomware gang claimed last year to have exploited a zero-day vulnerability in Cleo’s widely used enterprise file transfer products, which allow companies to share large sets of sensitive data over the internet. By breaching these systems, the hackers stole reams of data from Cleo’s corporate customers." --- [![CH Diligence (thicker line)](https://www.castlehalldiligence.com/hs-fs/hubfs/CH%20Diligence%20(thicker%20line).jpg?width=200&height=78&name=CH%20Diligence%20(thicker%20line).jpg "CH Diligence (thicker line)")](http://castlehalldiligence.com) [![Castle Hall Diligence](https://www.castlehalldiligence.com/hs-fs/hubfs/bobble.png?width=60&height=61&name=bobble.png "Castle Hall Diligence")](https://www.castlehalldiligence.com) [![Sign In](https://no-cache.hubspot.com/cta/default/4256284/c25d63cf-000a-4c8c-97b3-422965550826.png)](https://cta-redirect.hubspot.com/cta/redirect/4256284/c25d63cf-000a-4c8c-97b3-422965550826) ** ** ** Search this site on Google Search Google **Menu** ** ** [![Sign In](https://no-cache.hubspot.com/cta/default/4256284/c25d63cf-000a-4c8c-97b3-422965550826.png)](https://cta-redirect.hubspot.com/cta/redirect/4256284/c25d63cf-000a-4c8c-97b3-422965550826) ![shutterstock_490960141-1](https://www.castlehalldiligence.com/hs-fs/hubfs/shutterstock_490960141-1.jpg?width=7000&name=shutterstock_490960141-1.jpg "shutterstock_490960141-1") # Industry News: ESG5 [Content Title](https://www.castlehalldiligence.com/cyber-news/know-your-breach-hertz#) Description < Previous page Next page > ## Know Your Breach: Hertz Apr 17, 2025 1:53:33 PM **The Target:** ​ ​Car rental giant Hertz **The Take:** The stolen data varies by region, but largely includes Hertz customer names, dates of birth, contact information, driver’s licenses, payment card information, and workers’ compensation claims. Hertz said a smaller number of customers had their Social Security numbers taken in the breach, along with other government-issued identification numbers. **The Vector:** The company attributed the breach to a vendor, software maker Cleo, which last year was at the center of a mass-hacking campaign by a prolific Russia-linked ransomware gang. Hertz is one of dozens of companies that used Cleo’s software at the time of their data thefts. The Clop ransomware gang claimed last year to have exploited a zero-day vulnerability in Cleo’s widely used enterprise file transfer products, which allow companies to share large sets of sensitive data over the internet. By breaching these systems, the hackers stole reams of data from Cleo’s corporate customers. This breach is critical reminder that zero-day exploits do happen, and furthermore that patching software in a timely, effective manner is a key component of ensuring customer data is protected. Ensuring third-party vendors are deploying patches and fixes in accordance with a firm’s cybersecurity policy is an important step in an overall robust security posture. [Read more...](https://techcrunch.com/2025/04/14/hertz-says-customers-personal-data-and-drivers-licenses-stolen-in-data-breach/) Topics:[Know Your Breach](https://www.castlehalldiligence.com/cyber-news/topic/know-your-breach) ### About Castle Hall Diligence Castle Hall helps investors build comprehensive due diligence programs across hedge fund, private equity and long only portfolios [More →](https://www.castlehalldiligence.com/) - [Recent](https://www.castlehalldiligence.com/cyber-news/know-your-breach-hertz#recent) - [Topics](https://www.castlehalldiligence.com/cyber-news/know-your-breach-hertz#topics) - [Archive](https://www.castlehalldiligence.com/cyber-news/know-your-breach-hertz#archive) - [Asia (13)](https://www.castlehalldiligence.com/cyber-news/tag/asia) - [Australia (19)](https://www.castlehalldiligence.com/cyber-news/tag/australia) - [China (7)](https://www.castlehalldiligence.com/cyber-news/tag/china) - [Europe (39)](https://www.castlehalldiligence.com/cyber-news/tag/europe) - [Global (201)](https://www.castlehalldiligence.com/cyber-news/tag/global) - [india (8)](https://www.castlehalldiligence.com/cyber-news/tag/india) - [Know Your Breach (92)](https://www.castlehalldiligence.com/cyber-news/tag/know-your-breach) - [Middle East (11)](https://www.castlehalldiligence.com/cyber-news/tag/middle-east) - [North America (397)](https://www.castlehalldiligence.com/cyber-news/tag/north-america) - [North Korea (3)](https://www.castlehalldiligence.com/cyber-news/tag/north-korea) - [Russia (2)](https://www.castlehalldiligence.com/cyber-news/tag/russia) - [South America (3)](https://www.castlehalldiligence.com/cyber-news/tag/south-america) - [U.K (31)](https://www.castlehalldiligence.com/cyber-news/tag/u-k) [More...](https://www.castlehalldiligence.com/cyber-news/know-your-breach-hertz#) - [May 2024 (40)](https://www.castlehalldiligence.com/cyber-news/archive/2024/05) - [November 2024 (40)](https://www.castlehalldiligence.com/cyber-news/archive/2024/11) - [May 2025 (40)](https://www.castlehalldiligence.com/cyber-news/archive/2025/05) - [July 2025 (40)](https://www.castlehalldiligence.com/cyber-news/archive/2025/07) - [January 2024 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2024/01) - [March 2024 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2024/03) - [April 2024 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2024/04) - [June 2024 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2024/06) - [August 2024 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2024/08) - [September 2024 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2024/09) - [January 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/01) - [February 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/02) - [March 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/03) - [April 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/04) - [June 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/06) - [September 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/09) - [October 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/10) - [November 2025 (32)](https://www.castlehalldiligence.com/cyber-news/archive/2025/11) - [February 2024 (24)](https://www.castlehalldiligence.com/cyber-news/archive/2024/02) - [July 2024 (24)](https://www.castlehalldiligence.com/cyber-news/archive/2024/07) - [October 2024 (24)](https://www.castlehalldiligence.com/cyber-news/archive/2024/10) - [December 2024 (24)](https://www.castlehalldiligence.com/cyber-news/archive/2024/12) - [August 2025 (24)](https://www.castlehalldiligence.com/cyber-news/archive/2025/08) - [December 2025 (24)](https://www.castlehalldiligence.com/cyber-news/archive/2025/12) [More...](https://www.castlehalldiligence.com/cyber-news/know-your-breach-hertz#) ### Subscribe to Cyber Updates #### Castle Hall Diligence                                                                  Castle Hall Alternatives International **Montréal** 1080 Côte du Beaver Hall, Suite 904 Montréal, QC Canada, H2Z 1S8 +1-450-465-8880       **Abu Dhabi** Floor No. 15 Al Sarab Tower, Adgm Square, Al Maryah Island, Abu Dhabi, UAE Tel: +971 (2) 694 8510   ![bobble.png](https://www.castlehalldiligence.com/hs-fs/hubfs/bobble.png?width=250&name=bobble.png "bobble.png") Copyright © 2021 Entreprise Castle Hall Alternatives, Inc. All Rights Reserved. [Terms of Service](https://castlehalldiligence-4256284.hs-sites.com/terms-of-use) and [Privacy Policy](https://castlehalldiligence-4256284.hs-sites.com/privacy-policy-0) ```json { "@context" : "http://schema.org", "@type" : "Organization", "name" : "Castle Hall", "sameAs" : [ "https://www.facebook.com/Castle-Hall-Diligence-101021611617267/", "https://www.linkedin.com/company/castle-hall-diligence/", "https://twitter.com/castlehall1", "https://www.instagram.com/castle_hall/" ], "url" : "https://www.castlehalldiligence.com" } ```