Hertz data breach caused by CL0P ransomware attack on vendor

The report describes a CL0P ransomware operation that leveraged zero-day vulnerabilities in Cleo managed file transfer products during 2024 to conduct automated, large-scale campaigns and exfiltrate customer data from multiple organizations, including Hertz; stolen data available on CL0P’s leak site may include personally identifiable information such as driver’s license details and Social Security Numbers, and affected customers are receiving breach notifications and identity monitoring offers.