U -Haul is notifying customers of a data breachafter a hacker appears to have gained access to an internal company system that contained customer information.
The compromised files include personal information. However, payment details have not been affected by the incident.
U-Haul is an American company based in Arizona that rents moving equipment and storage space. It offers trucks, trailers, and other equipment and services for moving household goods.
See also: Integris Health: Data breach affects 2.4 million people
Yesterday, U-Haul began sending emails to customers to inform them of the breach of their data.
“U-Haul learned on December 5, 2023 that legitimate credentials were used by an unauthorized party to access a system used by U-Haul Dealers and Team Members to track customer reservations and view customer records,” says of the incident.
The exposed customer data includes full names, dates of birth, and driver's license numbers.
U-Haul clarified that the compromised system is not part of the payment, so no financial data has been affected.
See also: Prudential Financial: Announced data breach
The company has reset passwords for all affected accounts and has implemented additional measures security and controls to prevent similar incidents.
For customers affected by the data breach, U-Haul is offering free identity theft protection for one year.
At this time, we do not know the exact number of people affected.
It is worth noting that the company's website is also unavailable (at the time of writing).
Consequences of a data breach
The first and most immediate consequence for U-Haul customers is the breach of their privacy. The personal information that was exposed could be used for attacks phishing or other forms of fraud.
🔒 Protect your privacy with Proton VPN
Swiss VPN from the creators of Proton Mail — strict no-logs policy, strong encryption, and built-in NetShield that blocks ads, trackers, & malware.
- ✔ No-logs, based in Switzerland (except 14-Eyes)
- ✔ NetShield: blocks ads, trackers & malicious domains
- ✔ Covers all devices — free version available
The link is an affiliate link — SecNews may receive a commission at no additional cost to you. It does not affect the independence of our article writing.
See also: US government agency notified of data breach
Second, while payment information was not affected, customers should be wary of scams. Attackers may use the information they have obtained to pretend to be U-Haul and request more information or attempt to gain access to other accounts.
Finally, the data breach could have trust customer in U-Haul. Customers may question the company’s ability to protect their data, which could affect their future choices about using its services.
Source: www.bleepingcomputer.com
