Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

67,000 U-Haul Customers Impacted by Data Breach

U-Haul says customer information was compromised in a data breach involving a reservation tracking system.

American moving rental company U-Haul has started informing 67,000 customers that their personal information was compromised in a data breach.

The incident, the company says, was identified in early December 2023 and involved unauthorized access to a system that allows U-Haul Dealers and Team Members to track reservations and view customer records.

According to the company, an unauthorized party used legitimate credentials to access the system. However, U-Haul has not said how the attackers came by the credentials.

“We initiated our response protocol and a cybersecurity firm was engaged to conduct an investigation. The investigation identified specific customer records that were accessed, including one of your records,” the company notes in the notification letter to the affected individuals, a copy of which was submitted to the Maine Attorney General’s Office.

Responding to a SecurityWeek inquiry, U-Haul confirmed that the incident affected approximately 67,000 customers in the US and Canada and that it is notifying them by mail.

According to U-Haul, the unauthorized party was able to view names, dates of birth, and driver’s license numbers, but did not access financial information.

“The system accessed by the unauthorized party was not part of our payment system. No payment card data was involved,” U-Haul said.

The notification letter sent to customers also reveals that U-Haul determined on December 6, 2023, that personal information was compromised in the attack, but does not explain why the company waited more than two months to inform them of the incident.

Advertisement. Scroll to continue reading.

“We worked to analyze the customer records involved, and, on December 6, 2023, we determined that your name, date of birth and driver’s license number was accessed by the unauthorized person,” the letter reads.

U-Haul also notes that it has changed the passwords for the affected accounts and implemented additional security measures, and is offering free identity protection services to the affected individuals.

This is not the first time U-Haul customer data has been accessed by hackers leveraging compromised credentials

Related: 1.5 Million Affected by Data Breach at Insurance Broker Keenan & Associates

Related: VF Corp Says Data Breach Resulting From Ransomware Attack Impacts 35 Million

Related: Law Firm Orrick Reveals Extensive Data Breach, Over Half a Million Affected

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

Shaun Khalfan has joined payments giant PayPal as SVP, CISO.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.