The Hertz Corporation, including the Hertz Dollar and Thrifty Brands Data Breach Notification Letter

The Hertz Corporation, along with its prominent subsidiary brands Dollar and Thrifty, stands as a global leader in the vehicle rental and transportation services industry. Operating millions of rental transactions annually across airports, neighborhood locations, and international hubs, the enterprise collects a vast repository of deeply sensitive consumer and corporate data. To facilitate seamless bookings, loyalty memberships, payment processing, and regulatory compliance, the corporation routinely gathers detailed personal identifying information, financial records, government identification documents, and travel itineraries for millions of customers worldwide.

In 2025, official disclosures submitted to the Delaware Attorney General revealed that The Hertz Corporation suffered a significant cybersecurity incident, compromising its network infrastructure and exposing sensitive consumer records. While large-scale retail and transportation network breaches typically involve sophisticated external intrusions, ransomware deployment, or third-party vendor compromises, incidents of this magnitude often stem from vulnerabilities in customer relationship management platforms, centralized reservation databases, or cloud-hosted payment processing gateways. Unauthorized actors frequently target these environments to exploit legacy systems or bypass perimeter defenses, gaining prolonged access to consumer databases before detection occurs.

The exposure resulting from this breach places affected individuals at severe, immediate risk of identity theft, financial fraud, and targeted phishing campaigns. Because modern rental car transactions require comprehensive verification, the compromised data categories likely include full names, home addresses, dates of birth, driver license numbers, passport details, credit and debit card numbers, and secure account credentials. Driver license and passport information cannot be easily changed like a password, leaving victims permanently vulnerable to synthetic identity fraud, fraudulent credit applications, and unauthorized account takeovers that can impact personal credit scores and financial well-being for years.

As a commercial enterprise entrusted with high-value consumer data, The Hertz Corporation is legally obligated to implement robust administrative, technical, and physical safeguards under state consumer protection statutes, the Federal Trade Commission Act, and applicable state data breach notification laws. These regulations require businesses to maintain adequate encryption standards, conduct regular security audits, and promptly monitor access to customer databases. The occurrence of a data breach of this scale strongly indicates potential failures in adhering to these foundational cybersecurity standards, suggesting that existing security measures were inadequate to protect consumer privacy against foreseeable digital threats.

Receiving a data breach notification letter from The Hertz Corporation serves as formal legal acknowledgment that your confidential information was compromised due to corporate security shortcomings. Legally, the receipt of this notice establishes the foundation and standing required to participate in a class action lawsuit against the company, enabling affected consumers to seek accountability and financial compensation. Importantly, under modern legal standards, victims do not need to prove that they have already suffered actual financial loss or identity theft to pursue legal action; the increased risk of future harm is sufficient. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket and owe no fees unless we successfully recover compensation on your behalf.