U-Haul says hacker accessed customer records using stolen creds

U-Haul disclosed that on December 5, 2023 attackers used legitimate stolen credentials to access an internal system used by dealers and team members to track customer reservations, exposing customer records (including full names, dates of birth, and driver’s license numbers). The company says payment card data was not affected, has reset affected account passwords, is offering one year of identity theft protection to notified customers, and estimated the breach impacted 67,000 customers in the U.S. and Canada.