Hertz Corporation Data Breach Lawsuit Investigation
File Your Claim Now

Dapeer Law, P.A., a top-rated class action law firm, is investigating the Hertz Corporation data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

Hertz Data Breach Lawsuit Investigation

Were you recently notified about the Hertz data breach? Massive amounts of sensitive information—from Social Security numbers to credit-card details—may now be in the wrong hands. Find out if you can claim compensation and learn how to protect yourself today.

Quick Facts

  • Breach confirmed: February 10, 2025
  • Vendor involved: Cleo Communications US, LLC (file-transfer platform)
  • Attack method: Exploited zero-day vulnerabilities in October and December 2024
  • Affected brands: Hertz, Dollar, Thrifty
  • Free services: 2 years of identity and dark-web monitoring via Kroll

What Information Was Exposed?

Hertz’s investigation determined that the attackers accessed extensive personally identifiable information (PII) and, for some, protected health information (PHI):

  • Full names & contact details
  • Social Security numbers & other government IDs
  • Dates of birth & addresses
  • Driver’s license and passport numbers
  • Credit-card and other financial information
  • Medicare/Medicaid IDs and workers’ compensation data
  • Injury details tied to vehicle accident claims

How Did the Breach Happen?

Hackers exploited two previously unknown (“zero-day”) flaws in Cleo’s file-transfer software—first in October 2024 and again in December 2024. The compromise went undetected until Cleo alerted Hertz, prompting an immediate forensic investigation. On April 2, 2025, Hertz finished its data review and began notifying impacted consumers.

State-by-State Impact

Preliminary filings show large numbers of affected residents in several states:

  • Texas – 96,665
  • Massachusetts – 34,452
  • New Hampshire – 4,657
  • Maine – 3,409
  • California – 500+
  • Additional U.S. states and international customers may also be affected.

Your Legal Options

Data-breach laws allow victims to seek compensation for:

  • Out-of-pocket expenses (e.g., credit-monitoring fees, bank charges)
  • Time spent addressing fraud or identity theft
  • Future risk of identity theft and credit damage

If you received a notice—or suspect your data was involved—you may be eligible to join a class-action lawsuit against Hertz.

Protect Yourself Now

  1. Enroll in free Kroll monitoring: Sign up by the deadline on the Kroll portal.
  2. Check your credit reports: Request free reports at AnnualCreditReport.com.
  3. Add a fraud alert or freeze: Contact Equifax, Experian, or TransUnion.
  4. Watch financial statements: Report any unauthorized activity right away.
  5. Document losses: Keep records of time and expenses related to the breach; these may be recoverable.
Download Official Breach Notice (PDF)

Frequently Asked Questions

What happened in the Hertz data breach?

Hackers exploited zero-day vulnerabilities in Cleo’s file-transfer system used by Hertz, accessing sensitive customer and employee data during attacks in October and December 2024.

What personal information did the Hertz breach expose?

Exposed data includes names, addresses, Social Security numbers, driver’s license and passport numbers, dates of birth, credit-card details, medical IDs, and injury-related claim information.

Is Hertz offering free credit monitoring?

Yes. Hertz is providing two years of complimentary identity and dark-web monitoring through Kroll. Enroll using the dedicated portal listed in your notification letter or visit the link above.

How do I join a Hertz data breach lawsuit?

You can submit your details to qualified data-breach attorneys who are organizing class actions. They will evaluate your claim, confirm eligibility, and guide you through the filing process.

How long do I have to file a claim against Hertz?

Deadlines vary by state. Most states apply a two- to four-year statute of limitations for privacy or consumer-protection claims. Consult an attorney promptly to preserve your rights.

Will I have to pay legal fees upfront?

No. Data-breach class actions are typically handled on a contingency-fee basis—meaning attorneys are paid only if they secure a recovery for the class.

Can international Hertz customers participate?

Yes, customers outside the U.S. may still qualify. International privacy laws differ, so consult counsel familiar with your jurisdiction.

Attorney Advertising. Prior results do not guarantee a similar outcome.

File Your Claim Now