Final week, the transferring and rental firm U-Haul began sending out letters to prospects alerting them a few current knowledge breach. Bleeping Pc experiences that U-Haul found the breach earlier this summer season. The corporate discovered that attackers hacked a search device that contained the names and driver’s license data of shoppers.
U-Haul knowledge breach exposes buyer information
In keeping with U-Haul, an investigation started on July 12 following the invention of the breach. On August 12, the U-Haul investigators discovered that hackers accessed “some rental contracts” between November 5, 2021, and April 5, 2022.
Right here is U-Haul’s full rationalization for what occurred and what knowledge was accessed:
We detected a compromise of two distinctive passwords that had been used to entry a buyer contract search device that enables entry to rental contracts for U-Haul prospects. The search device can’t entry cost card data; no bank card data was accessed or acquired. Upon figuring out the compromised passwords, we promptly modified the passwords to forestall any additional unauthorized entry to the search device and began an investigation. Cybersecurity specialists had been engaged to determine the contracts and knowledge that had been concerned. The investigation decided an unauthorized individual accessed the client contract search device and a few buyer contracts. None of our monetary, cost processing or U-Haul e-mail programs had been concerned; the entry was restricted to the client contract search device.
All issues thought of, the hackers didn’t do a lot injury. They didn’t steal any bank card numbers or accounts. Taking a web page from different firms, U-Haul is providing any affected prospects one 12 months of Equifax identification theft safety providers free of charge.
“We sincerely apologize for that. Please know we’re working diligently to additional increase our safety measures to protect in opposition to such incidents and implementing extra safety safeguards and controls on the search device,” U-Haul added in its letter.