Posted On September 13, 2022 Consumer Privacy & Data Breaches
September 13, 2022 – U-Haul International, Inc. reported a data breach after the company was targeted in a recent cybersecurity attack. As a result of the breach, the name and driver’s license or state identification number of certain individuals was compromised. On September 9, 2022, U-Haul International, Inc. sent out data breach letters to those individuals whose information was affected by the breach.
The data breach lawyers at Console & Associates, P.C. are going to begin interviewing victims of the breach to determine what damages they sustained and what legal claims may be available to them. If you recently received a NOTICE OF DATA BREACH from U-Haul International, Inc., contact us at (866) 778-5500 to discuss your legal options, or submit a confidential contact form for a free case evaluation.
Below is a portion of the letter that U-Haul International, Inc. sent to individuals affected by the data breach:
Dear [Redacted],
We are writing to inform you of an incident that involved some of your information. We are providing this notice to explain the incident and measures we have taken, and also to provide some steps you can take in response.
What Happened?
We detected a compromise of two unique passwords that were used to access a customer contract search tool that allows access to rental contracts for U-Haul customers. The search tool cannot access payment card information; no credit card information was accessed or acquired. Upon identifying the compromised passwords, we promptly changed the passwords to prevent any further unauthorized access to the search tool and started an investigation. Cybersecurity experts were engaged to identify the contracts and data that were involved. The investigation determined an unauthorized person accessed the customer contract search tool and some customer contracts. None of our financial, payment processing or U-Haul email systems were involved; the access was limited to the customer contract search tool.
What Information Was Involved?
On August 1, 2022, our investigation determined some rental contracts were accessed between November 5, 2021, and April 5, 2022. After an in-depth analysis, our investigation determined on September 7, 2022, the accessed information includes your name and driver’s license or state identification number.
What Are We Doing?
The safety and trust of our customers, including the protection of personal information, is a top priority for U-Haul Company and we take that responsibility very seriously. While the information accessed in this incident did not include payment card information, we fully understand this is an inconvenience to you. We sincerely apologize for that. Please know we are working diligently to further augment our security measures to guard against such incidents and implementing additional security safeguards and controls on the search tool.
Additionally, we are offering affected customers identity theft protection services through Equifax for one year. This product helps detect possible misuse of your personal information and provides you with identity protection services focused on immediate identification and resolution of identity theft. The service is completely free to you and enrolling in this program will not hurt your credit score.
What You Can Do.
For more information, including some additional steps you can take to help protect yourself, please see the additional information provided with this letter.
For More Information.
If you have any questions, please call 866-963-0620, Monday through Friday, 9:00 a.m. to 5:00 p.m. Mountain Time.
