U-Haul International (U-Haul) has disclosed a data breach – hackers compromised a customer contract search tool and gained access to customer names and driver's license information.
See also: START: Russian streaming platform suffers data breach
Following an investigation of the incident that began on July 12 after the breach was discovered, the company found on August 1 that the attackers had access to rental contracts of certain customers between November 5, 2021, and April 5, 2022.
See also: T-Mobile: Agrees to pay $350 million to customers for last year's data breach
“After an in-depth analysis, our investigation determined that as of September 7, 2022, the information accessed by hackers includes name and driver’s license or identification number ,” U-Haul told affected customers in letters sent Friday.
The attacker gained access to the U-Haul rental agreement search portal after breaching two "unique passwords.".
Although it did not explain how the credentials were compromised, the company changed them after the breach was discovered to block additional malicious activity.
Attackers do not have access to credit card information
U-Haul added that no credit card information was accessed during the incident because the compromised search tool does not provide users with access to payment card information.
“The investigation determined that an unauthorized individual had access to the customer contract search tool and certain customer contracts,” U-Haul said.
“None of our financial systems, payment processing systems, or U-Haul email systems were involved – access was limited to the customer contract search tool.”
See also: Mangatoon: Data breach affected millions of accounts
U-Haul says it is providing affected customers with one year of free identity theft protection services through Equifax.
The American truck, trailer, and self-storage rental company has a network of more than 23,000 locations throughout the US and Canada.
It operates approximately 186,000 trucks, 128,000 trailers and 46,000 tow trucks and is the third largest self-storage operator in North America.
Information source: bleepingcomputer.com
