Inside the Hertz Class Action Lawsuit Over the Data Breach
Find out if you have a case
Free and confidential. No fee unless we win.
Disclaimer: By submitting the form above and checking the consent box, you agree to our conditions and privacy policy and permit Ethen Ostroff Law to contact you via text messages, phone calls (including automated calls). Standard message rates may apply.
The recent Hertz controversy started after the car rental company reported a data breach that exposed customer information, including driver’s license and payment details. For many people, the breach has created real worries about identity theft, fraud, and the stress of trying to protect their accounts.
Because of the Hertz breach, thousands of customers have joined a Hertz class action lawsuit. The Hertz lawsuit is about making sure the company takes responsibility and that people impacted by the breach have a chance to be heard.
At Ethen Ostroff Law, we are following the case and helping clients understand what it could mean for them. If your information was part of the breach, talking with a data breach attorney can help you decide on your next step.
The Hertz Corporation
Hertz has been around for over a century. It started in 1918 as a small car rental shop in Chicago and slowly grew into one of the biggest rental companies in the world. Most people know the Hertz brand, but the company also runs Dollar, Thrifty, and Firefly. Its headquarters are in Estero, Florida, and it serves millions of drivers in more than 160 countries. From airport counters to neighborhood locations, Hertz is a name many travelers recognize right away.
What Happened in the Hertz Data Breach
Hertz discovered a security issue on February 10, 2025, after learning that customer information had been accessed without permission. The breach came from a zero-day vulnerability in Cleo Communications, one of Hertz’s vendors. After reviewing the data through April 2, the company confirmed that the weakness had been exploited between October and December of 2024.
On April 11, 2025, Hertz notified the Maine Attorney General’s Office and began sending letters to customers whose information was exposed. The notice included an offer for two years of free identity monitoring with Kroll, which provides credit checks, fraud support, and identity theft recovery services.
So far, Hertz has not released the full number of people affected. It did report that at least 3,409 customers in Maine had their data compromised. If you received a notification letter from Hertz, that means your information was part of the breach.
What Information Was Exposed
Hertz confirmed that a wide range of customer data was taken in the breach. Not everyone had the same details exposed, but the list shows just how serious the issue is:
- Full names
- Contact information (email, phone number, home address)
- Dates of birth
- Credit card details
- Driver’s license numbers
- Reservation history
- Information tied to workers’ compensation claims
- A small number of Social Security or other government ID numbers
- Passport information (in very limited cases)
- Medicare or Medicaid IDs linked to workers’ comp claims (limited cases)
- Injury details connected to vehicle accident claims (limited cases)
How Many People Were Impacted
Hertz has not shared the full nationwide total, but reports to state officials give us some insight:
- California: at least 500 people notified
- Maine: 3,409 people notified
- Massachusetts: 34,452 people notified
- New Hampshire: 4,657 people notified
- Texas: 96,665 people notified
These numbers show how widespread the Hertz data breach was. Not every person had all categories of data exposed. However, even one piece of sensitive information in the wrong hands can cause serious problems.
Brands Affected
Customer data from all three rental brands under the company was exposed:
- Hertz
- Dollar
- Thrifty
What To Do If Your Information Was Exposed
If your data was part of the Hertz breach, you can take a few steps to protect yourself:
- Use the free monitoring. Hertz is offering identity monitoring through Kroll. Sign up if you were notified.
- Check your accounts. Look over your bank, credit card, and other financial statements for charges you don’t recognize.
- Pull your credit reports. You can get one free report each year from Equifax, Experian, and TransUnion.
- Add a fraud alert. Contact any of the three credit bureaus to flag your file so lenders confirm it’s really you before issuing new credit.
- Freeze your credit. A freeze blocks new accounts from being opened in your name unless you lift it, which helps stop identity theft.
Hertz Class Action Lawsuits
Hertz and its data vendor Cleo are now facing several class action lawsuits over the recent data breach. Three suits have been filed in federal court, two in Illinois and one in Florida. The lawsuits claim that Hertz and Cleo failed to protect customer information and then waited months before telling the public what happened.
Court filings state the breach took place between October and December 2024, but Hertz did not announce it until April 2, 2025. Plaintiffs argue that this delay puts millions of people at greater risk of identity theft, fraud, and misuse of their personal details.
The Florida Hertz class action lawsuit names Hertz as the only defendant. The two Illinois lawsuits name both Hertz and Cleo.
Claims Against Hertz in the Data Breach Lawsuits
People already filing claims against Hertz over the data breach are pointing to several key issues:
- Negligence
Hertz failed to put reasonable security protections in place, even though cybersecurity risks in their industry were well known.
- Reckless Data Handling
Hertz stored and managed sensitive information such as driver’s license numbers, payment card details, and personal identification in ways that left it open to attacks.
- Delayed Notification
The breach happened between October and December 2024, but customers were not notified until February through April 2025. This delay left them exposed longer than necessary.
- Violation of Consumer Protection Laws
Hertz broke state laws that require companies to safeguard personal data and notify customers quickly after a breach.
What plaintiffs are seeking:
- Monetary damages for fraud, identity theft risks, credit monitoring, stress, and lost time
- Court orders requiring Hertz to strengthen cybersecurity, run regular audits, and provide better staff training
Do I Have a Case?
If your information was exposed in the Hertz data breach, you may have grounds to take legal action. You could qualify if:
- You received a breach notice. If Hertz, Thrifty, or Dollar Car Rental contacted you about the incident, or you believe your data was involved, you may be eligible.
- You rented through Hertz, Thrifty, or Dollar. Anyone who shared personal or payment information when booking or renting may have been affected.
- You’ve dealt with fraud or identity theft. If your information has already been misused, or you’ve noticed suspicious charges, credit problems, or other issues tied to the breach, you could have a claim for compensation.
Legal Steps to Take After Receiving a Hertz Breach Notice
If you’ve been notified that your data was exposed, you’ll likely receive (or may have already received) a notice explaining your rights. This could involve a lawsuit, a class action, or mass arbitration. It’s important to understand your options before taking the next step because they work differently.
- Review the notice carefully. Read it closely. It should explain your rights, the deadlines for filing or opting out, and whether you’re being directed toward a lawsuit, class action, or arbitration.
- Watch your accounts and identity. Use any free credit monitoring or identity protection services offered by Hertz, but don’t stop there. Add your own safeguards, like a credit freeze or fraud alerts with the credit bureaus, for extra protection.
- Think through your legal options.
Class action: Joining others in a Hertz class action suit can make the process easier and less expensive, though payouts are usually smaller.
Mass arbitration: If your rental agreement requires arbitration, this may move faster and sometimes results in higher individual payments.
Individual Hertz lawsuit: If your losses are significant, pursuing your own case with a lawyer may give you the strongest chance at fair compensation.
- Talk with a lawyer. If you’ve already faced identity theft, fraud, or financial damage, a lawyer who handles data breach cases can explain which option is best for you.
- Keep records. Save every notice, letter, and any proof of fraud or financial loss. Good documentation makes your claim stronger.
- Stay updated. Legal proceedings often include deadlines and instructions for filing. Keep an eye on official case websites or court communications so you don’t miss your chance to act.
Hertz Class Action Lawsuit vs. Mass Arbitration
If the Hertz data breach affected you, you have three main options: file your own Hertz lawsuit, join a Hertz class action suit, or go through mass arbitration. Class actions and mass arbitration sound similar, but they’re not. Here’s how they differ:
- Filing Process
In mass arbitration, each person files an individual claim against Hertz. Many claims can be filed at once, but each is handled separately.
In a class action, one lead plaintiff files a single lawsuit on behalf of the whole group. Everyone is included unless they opt out.
- Decision-Making and Outcomes
In mass arbitration, an arbitrator reviews each claim and makes an individual decision. The outcome can vary depending on the person’s situation.
In a class action, the court issues one judgment or settlement that applies to everyone in the class.
- Control and Participation
Mass arbitration gives participants more control and an individual outcome.
In class actions, members have less say and are bound by the group’s result.
- Speed and Cost
Mass arbitration is typically faster because cases are processed individually but at the same time.
Class actions usually take longer due to court procedures but may be less costly for individuals.
- Legal Strategy
Companies commonly use arbitration clauses in contracts to prevent class action lawsuits.
Class actions are used when plaintiffs want to combine claims for efficiency and stronger negotiating power.
Why Hertz Customers Should Know This
Because Hertz rental contracts include arbitration clauses, many claims from the data breach are being handled through mass arbitration rather than through class actions.
Data Breach Lawyer at Ethen Ostroff Law
Your personal information is one of the most valuable things you own. If it’s exposed in a data breach, it can lead to identity theft, financial losses, and years of frustration trying to repair the damage. That’s why it’s important to act quickly if you received a notice or even suspect that your data was part of the Hertz breach.
At Ethen Ostroff Law, we stand with people, not corporations. As a data breach attorney, we can walk you through your options and help determine whether joining a Hertz class action lawsuit, pursuing mass arbitration, or filing your own Hertz lawsuit is the best move for you.
Here’s what we can do for you:
- Review your eligibility for a claim
- Make sure you don’t miss important deadlines
- Work to recover the compensation you deserve
We know how serious a data breach can be and the long-term risks it creates. Call us today for a free, confidential case review.
Frequently Asked Questions
What is the Hertz company scandal?
Hertz has been involved in a few major scandals. The most well-known one is when they wrongly accused hundreds of customers of car theft, leading to some people being arrested. They also got in trouble for inaccurate financial reporting and had to pay a large penalty. More recently, they had a significant data breach that exposed many customers’ personal information.
Is there a class action suit against Hertz?
Yes, there are class action lawsuits against Hertz right now because of their data breach. These lawsuits claim the company failed to protect customer data like driver’s licenses and Social Security numbers. They argue that Hertz did not secure the information properly or notify people quickly enough. The suits aim to get money for affected customers and force Hertz to improve its security.
How much is the Hertz settlement?
A final settlement amount for the data breach hasn’t been decided yet. It’s possible that each person who joins could receive around $1,500, but that’s just an estimate. Hertz is already offering two years of free identity theft protection to those affected. The total amount Hertz will pay overall depends on how many people file claims.
Is it worth joining a class action lawsuit?
Joining a class action is usually a low-effort way to seek some compensation. A Hertz class action lawsuit attorney can explain the process and what to expect. You don’t have to pay any legal fees upfront to participate. However, you should know that any cash payment might be small and could take a long time to arrive. It’s often worth signing up for the free benefits, but don’t expect a large payout.
