More than 100,000 had information stolen from Hertz through Cleo file share tool

Hertz disclosed that unauthorized actors exploited zero-day vulnerabilities in the Cleo file-sharing platform in October and December 2024 to acquire sensitive customer and employee data — including Social Security numbers, driver’s licenses, payment card information, and medical/claims details. The company notified multiple U.S. states, is offering identity protection services, and the incident appears linked to a wider exploitation campaign (named by the Clop ransomware group) that affected numerous other organizations and potentially tens of thousands of individuals.