Hertz, Thrifty data breach: Australian data stolen in vendor hack
In 2024, Hertz, the well-known global car rental company, fell victim to a significant data breach, which impacted customers worldwide, including many Australians. The breach stemmed from a vulnerability in a third-party file-sharing vendor used by Hertz. While the company has confirmed that no misuse of personal data has been reported yet, it’s still essential for older Australians to understand the potential risks and how to protect themselves.
What Happened?
Between October and December 2024, a cyberattack on the Cleo file transfer platform exposed sensitive customer information. Hertz, which used Cleo for some of its file transfers, had its data compromised as a result of the breach. It wasn’t until February 2025 that Hertz confirmed the breach and began notifying customers.
The personal data that was exposed includes:
- Names and Contact Information
- Driver’s License Details
- Payment Card Information
- Passport Information (for a very small number of individuals)
Although Hertz has assured customers that no fraudulent activity has been detected, the company has urged affected individuals to remain vigilant and keep an eye on their accounts for any unusual behavior.
What Does This Mean for Older Australians?
If you’re over 60 and living in Australia, this breach could be a cause for concern, particularly if you’ve rented from Hertz or used any of its services under its Thrifty or Dollar brands. Here’s how the breach could potentially affect you:
- Compromised Financial Information: The breach includes payment card information, which could be used for fraudulent purchases. This is particularly worrying for seniors, many of whom rely on fixed incomes or have less experience with monitoring financial activity.
- Driver’s License and Passport Details: Having these forms of identification exposed could put you at risk for identity theft. Cybercriminals can use this personal information to impersonate you or access other services in your name.
While it’s important to be cautious, it’s also essential to keep things in perspective. Many people affected by this breach will not experience fraud or identity theft. However, being aware and taking action can minimise any potential risks.
How to Protect Your Personal Information
If you suspect that you may have been impacted by this breach, there are several simple and effective steps you can take to protect yourself:
- Monitor Your Accounts: Regularly check your bank and credit card statements for any unauthorized transactions. If you spot anything unusual, contact your financial institution immediately to report it.
- Review Your Credit Report: Request a free credit report to check for any unfamiliar accounts or activity. In Australia, you’re entitled to one free report each year from each of the major credit agencies.
- Use Identity Monitoring Services: Hertz is offering free identity monitoring services through Kroll for two years to affected customers. This can help you stay on top of any changes in your personal data and give you peace of mind.
- Be Cautious of Scams: Scammers often take advantage of data breaches to try to trick people into giving out personal information. If you receive unexpected calls, emails, or messages requesting sensitive information, don’t provide it unless you’re certain of the source.
- Change Your Passwords: If you suspect that your personal details, including online accounts linked to your financial information, have been exposed, it’s a good idea to change your passwords. Ensure that your passwords are strong and unique for each account.
Key Things to Look Out For
Although the breach doesn’t mean that every affected person will experience identity fraud, it’s important to be vigilant. Here are a few signs that may indicate potential fraud:
- Unexpected Account Activity: If you see unfamiliar charges on your bank or credit card statements, it could be a sign that someone has accessed your financial information.
- Strange Emails or Calls: Be wary of unsolicited requests for personal information, especially if they reference your recent Hertz rental. Legitimate companies will never ask for sensitive details via email or phone call.
- Problems Accessing Accounts: If you notice any unusual login attempts or issues accessing your online accounts, it’s worth investigating further.
While this breach may not affect most people, it’s always best to stay alert. If you notice anything out of the ordinary, report it immediately to the relevant authorities, such as your bank or credit provider.
Although the Hertz data breach has affected some Australian customers, most people will likely not face any issues. However, it’s important for older Australians to remain aware of the situation and take proactive steps to protect their personal information. By monitoring accounts, using identity monitoring services, and being cautious of scams, you can reduce the risk of identity theft and ensure that your personal data remains secure. Stay informed, take action if needed, and continue to be vigilant.
Read more articles on scams and how to look out for common targets here
