Giant car rental company Avis disclosed that an August 2024 data breach affected 299,006 of its customers.
According to the letter it sent out to those who have been affected, on August 3, 2024, a threat actor gained unauthorized access to its business applications. The data was access until August 6. The data breach was detected on August 14. The company took steps to end the access and launched an investigation with third-party experts, as well as alerted the authorities and notified the Maine Attorney General’s Office.
The stolen data includes personal information such as names, mailing addresses, email addresses, phone numbers, dates of birth, credit card numbers with expiration dates and driver’s license numbers – critical information that can be used for identity theft or fraud.
The car rental did not disclose technical details about the attack
To mitigate possible damage, Avis is providing all affected customers with one year of free credit monitoring through Equifax.
Read more about it here.