Security News > 2024 > February > U-Haul says hacker accessed customer records using stolen creds
U-Haul has started informing customers that a hacker used stolen account credentials to access an internal system for dealers and team members to track customer reservations.
The breach exposed customer records that include personal information but payment details have not been impacted.
"U-Haul learned on December 5, 2023, that legitimate credentials were used by an unauthorized party to access a system U-Haul Dealers and Team Members use to track customer reservations and view customer records," - U-Haul.
"The investigation identified specific customer records that were accessed, including one of your records," the company says in the notification to customers.
The data types that have been exposed in these customer records include full names, dates of birth, and driver's license numbers.
In September 2022, U-Haul disclosed another data breach, saying that attackers had accessed customer rental contracts between November 2021 and April 2022.