U-Haul data breach exposes customers’ names, driver’s license data

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

U-Haul data breach overview: 

• Who: U-Haul International announced it was the victim of a data breach that exposed the names and drivers license information of some of its customers between Nov. 5, 2021, and April 5, 2022. 
• Why: U-Haul says the data breach occurred after a hacker was able to access one of its customer contact search portals. 
• Where: U-Haul is used by consumers nationwide. 

U-Haul International disclosed that it was the victim of a data breach that exposed the names and driver’s license information of some of its customers. 

The data breach occurred after hackers accessed a customer contact search tool, allowing unauthorized access to occur between Nov. 5, 2021, and April 5, 2022, Bleeping Computer reports. 

U-Haul says it began an investigation into the incident on July 12 after becoming aware of the data breach, ultimately discovering on Aug. 1 that hackers had been able to access some of its customers’ rental contracts. 

The moving and storage giant sent a notification letter last week to customers who were affected by the U-Haul data breach, informing them that their information had been improperly accessed by a third party. 

“After an in-depth analysis, our investigation determined on September 7, 2022, the accessed information includes your name and driver’s license or state identification number,” U-Haul writes in its letter. 

U-Haul data breach result of hacker who compromised 2 ‘unique passwords’ to gain unauthorized access 

U-Haul says the hacker had to compromise two “unique passwords” to gain access to the company’s rental contracts search portal while reassuring its customers that the credentials have since been changed. 

The company also reassured customers that none of their credit card information had been accessed, acquired or otherwise compromised during the U-Haul data breach. 

“None of our financial, payment processing or U-Haul email systems were involved; the access was limited to the customer contract search tool,” the company writes. 

U-Haul says it will provide affected customers with a free one-year subscription to identity theft protection services with Equifax to alert them if their personal information is ever misused. 

In related data breach news, a consumer filed a class action lawsuit against Samsung earlier this month, arguing the company failed to protect the private information of thousands of its customers during an August data breach. 

Was your personal information exposed in the U-Haul data breach? Let us know in the comments!

Read About More Class Action Lawsuits & Class Action Settlements:

• SN Servicing Corp. data breach $900K class action settlement
• Samsung class action alleges data breach compromised personal information of customers
• San Francisco 49ers data breach affects 20K fans
• Nelnet class action claims data breach exposed personal information of more than 2.5M individuals