American automobile rental big Avis notified prospects that unknown attackers breached certainly one of its enterprise functions final month and stole a few of their private data.
In response to data breach notification letters despatched to impacted prospects on Wednesday and filed with California’s Workplace of the Lawyer Basic, the corporate took motion to cease the unauthorized entry, launched an investigation with the assistance of exterior cybersecurity specialists, and reported the incident to related authorities after studying of the breach on August 5.
This investigation revealed that the attacker had entry to its enterprise utility from August 3 till August 6, when the corporate evicted the malicious actor from its programs and blocked its entry. On August 14, it additionally discovered that the attacker stole some prospects’ private data, together with their names and different undisclosed delicate knowledge.
For the reason that breach, Avis says it has labored with outdoors specialists to strengthen security measures for the affected utility and applied further safeguards throughout its programs.
The corporate added that it is actively reviewing security monitoring and controls to bolster security defenses and warned prospects of id theft and fraud dangers following the data breach.
“It’s all the time a good suggestion to stay vigilant towards threats of id theft or fraud,” Avis instructed these whose private data was stolen within the incident.
“You are able to do this by recurrently reviewing and monitoring your account statements and credit score historical past for any indicators of unauthorized transactions or exercise. You’ll be able to contact the credit score reporting businesses should you suspect any unauthorized exercise.”
The automobile rental firm additionally provided these affected a free one-year membership to Equifax’s credit score monitoring service, which gives help with id theft detection and backbone.
Avis is a subsidiary of Avis Price range Group, a number one world mobility options supplier that additionally owns Zipcar, the world’s main car-sharing community. Its Avis and Price range automobile rental manufacturers function over 10,000 rental areas in 180 international locations throughout North America, Europe, and Australasia. Avis Price range Group has reported greater than $3.0 billion in revenues for the second quarter of 2024.
The corporate has not responded to a number of requests for remark from BleepingComputer asking for extra details about the assault’s nature, the variety of affected prospects, and the opposite private data stolen within the breach.
