Hacker Steals Data On 300k From Avis

If you recently rented a car from Avis, your data may be in the hands of hackers. 

The rental car provider is now sending data breach notifications to affected US consumers. “We discovered on August 5, 2024, that an unauthorized third party gained access to one of our business applications,” the letter says.

Avis also told Maine’s attorney general that the breach affects 299,006 people. One of the company’s data breach notifications also shows that the hackers may have obtained numerous personal details from affected customers. 

According to the company’s investigation, the stolen data varies between customers, but “name, mailing address, email address, phone number, date of birth, credit card number and expiration date, and driver’s license numbers” could have been stolen. 

The stolen information can expose affected victims to fraud schemes, making it easy for scammers to make unwanted purchases or register for new loans using the customer’s details. In response, Avis is providing one year of free credit monitoring to affected victims. Users can also consider placing a free credit freeze through the three credit agencies to prevent fraudsters from opening a credit card or loan in their name.  

Although Avis didn’t immediately respond to a request for comment, the company indicated to Maine’s attorney general that the hack could be sourced to “insider wrongdoing.”

In a letter to Iowa residents, the company added: “Since the incident occurred, Avis has worked with cybersecurity experts to develop a plan to enhance security protections for the impacted business application. In addition, Avis has taken steps to deploy and implement additional safeguards onto its systems and is actively reviewing its security monitoring and controls to enhance and fortify the same.”