Hertz Corporation Data Breach — Class Action Review

The Hertz Corporation stands as one of the world's leading vehicle rental and mobility services providers, operating a vast global network across airports, downtown locations, and neighborhood hubs. In the course of managing millions of vehicle reservations, processing corporate accounts, and handling loyalty program memberships, the company routinely collects and stores extensive personal, financial, and transactional data from consumers. This information infrastructure is vital for operations, yet it transforms the enterprise into a prime target for malicious actors seeking high-value consumer profiles.

In 2025, the Hertz Corporation reported a data security incident to the New Hampshire Attorney General, raising serious concerns regarding the safety of consumer and corporate customer records. While exact infiltration vectors can vary in enterprise-scale technology environments, incidents impacting major transportation and travel corporations typically involve sophisticated cyberattacks, vulnerabilities in customer-facing reservation portals, or unauthorized access to third-party vendor databases. These sophisticated intrusions often bypass perimeter defenses, allowing unauthorized third parties to dwell within internal networks undetected for extended periods while exfiltrating sensitive customer files.

The data compromised in incidents of this nature typically includes a hazardous mix of personally identifiable information such as full names, dates of birth, residential addresses, driver's license numbers, payment card details, and account credentials. The exposure of driver's license numbers and financial details carries immediate and severe risks, as threat actors can leverage this information to commit synthetic identity fraud, drain bank accounts, or execute unauthorized transactions in the victim's name. Furthermore, the combination of personal identifiers and transaction histories leaves affected individuals highly vulnerable to targeted phishing schemes and ongoing risks of financial extortion.

As a commercial entity entrusted with sensitive consumer data, the Hertz Corporation has a legal duty under state consumer protection statutes and common law principles to implement and maintain robust, industry-standard cybersecurity safeguards. This obligation requires the deployment of advanced encryption, regular vulnerability assessments, strict access controls, and prompt monitoring systems to detect unauthorized network activity. The occurrence of a significant data breach strongly suggests potential failures in upholding these foundational security protocols, raising questions about whether the corporation adequately protected the consumer data entrusted to its care.

Receiving an official data breach notification letter from the Hertz Corporation is an acknowledgement that your private information was compromised due to corporate security failures. Legally, this notification establishes the necessary standing for affected consumers to participate in a class action lawsuit aimed at holding the company accountable for negligence. Individuals do not need to prove that they have already suffered actual financial loss or identity theft to seek legal recourse and demand institutional reform. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.