Event Rental Systems Data Breach Lawsuit Investigation
Event Rental Systems disclosed that unauthorized code on some customer websites captured payment-card data between October 2024 and October 2025. If you received a breach notice, you may be entitled to free identity-protection services and potential legal remedies—read on to understand your options.
Download Official Breach Notice (PDF)Key Facts of the Event Rental Systems Data Breach
- Breach window: October 1, 2024 – October 31, 2025
- Notice mailed: December 15, 2025
- Incident type: Malicious code embedded in checkout modules on customer sites
- Data involved: Name, contact details, payment card number, CVV, expiration date
- Unexposed data: Social Security numbers, state ID numbers, bank-account information
- Complimentary services: One year of Experian credit-monitoring and identity-restoration (enroll by February 28, 2026)
- Law-enforcement & card networks notified
What Happened?
According to Event Rental Systems’ December 15, 2025 notification, investigators discovered unauthorized code within certain website modules that processed customer payments. The code harvested payment-card details during transactions. Once identified, Event Rental Systems removed the code, secured affected systems, and engaged an independent forensic firm to analyze the intrusion.
Information Exposed
The investigation confirmed that the following data elements could have been scraped during the breach period:
- Name
- Contact information
- Payment card number
- CVV security code
- Card expiration date
No Social Security numbers, state identification numbers, or bank-account details were involved.
Company Response
Event Rental Systems stated that it:
- Removed the malicious code and secured impacted systems
- Engaged a digital forensics firm to investigate the incident
- Notified law-enforcement authorities and major card brands
- Enhanced security monitoring, controls, and policies
- Is offering one year of free credit-monitoring and identity-restoration through Experian
Recommended Next Steps for Affected Customers
- Enroll in Experian services: Use the unique code in your letter to activate monitoring by February 28, 2026.
- Review financial statements: Check all payment-card and bank statements for unauthorized activity.
- Remain vigilant: Consider setting up transaction alerts and periodically obtain free credit reports.
- Report suspicious activity: If you detect fraud, file a police report and notify your card issuer immediately.
- Document everything: Keep the breach notice and any related correspondence for potential legal claims.
Company Overview
Fullsteam Software Holdings LLC d/b/a Event Rental Systems (ERS) develops cloud-based software for the party and event-rental industry.
- Website: eventrentalsystems.com
- Headquarters: 6300 Riverside Plaza Ln NW Suite 230, Albuquerque, New Mexico, United States
- Founded: 2009
- Industry: Software / SaaS
- Parent company: Fullsteam
- Social: Facebook | LinkedIn | Instagram | YouTube
Frequently Asked Questions
I received a data breach letter from Event Rental Systems — what should I do?
Enroll in the free Experian credit-monitoring service before February 28, 2026, and closely watch your financial accounts. Contact local law enforcement if you spot fraudulent activity.
How do I submit a claim related to the Event Rental Systems data breach?
Gather your breach notice and any evidence of monetary loss. Then consult a data-privacy attorney or class-action firm to discuss your eligibility to file or join a lawsuit.
What information did the Event Rental Systems breach expose?
Names, contact information, payment card numbers, CVV codes, and expiration dates. Social Security numbers and bank-account details were not impacted.
Did Event Rental Systems offer credit monitoring, and for how long?
Yes, the company is providing one year of complimentary credit-monitoring and identity-restoration services through Experian.
How can I get the official breach notice (PDF) for Event Rental Systems?
Click the “Download Official Breach Notice (PDF)” button above or access the document on the California Attorney General’s website.