Hertz Falls Victim to Cleo Zero-Day Attacks

Hertz confirmed that some customer data was stolen after threat actors (attributed to the Clop ransomware gang) exploited zero-day vulnerabilities in Cleo Communications' managed file-transfer platform in Oct and Dec 2024; Hertz, Dollar and Thrifty are issuing breach notifications and the compromised data may include names, contact details, dates of birth, payment card and driver’s license information and, for a subset, government IDs and medical/claims data. Clop claims to have stolen data from dozens of companies during a mass-exploitation campaign targeting multiple Cleo products, and while no misuse has been confirmed, impacted individuals are advised to monitor accounts and credit reports.