American automotive rental large Avis notified clients that unknown attackers breached one in every of its enterprise purposes final month and stole a few of their private data.
Based on information breach notification letters despatched to impacted clients on Wednesday and filed with California’s Workplace of the Lawyer Basic, the corporate took motion to cease the unauthorized entry, launched an investigation with the assistance of exterior cybersecurity specialists, and reported the incident to related authorities after studying of the breach on August 5.
This investigation revealed that the attacker had entry to its enterprise software from August 3 till August 6, when the corporate evicted the malicious actor from its programs and blocked its entry. On August 14, it additionally discovered that the attacker stole some clients’ private data, together with their names and different undisclosed delicate information.
For the reason that breach, Avis says it has labored with exterior specialists to strengthen safety measures for the affected software and carried out further safeguards throughout its programs.
The corporate added that it is actively reviewing safety monitoring and controls to bolster safety defenses and warned clients of identification theft and fraud dangers following the info breach.
“It is always a good idea to remain vigilant against threats of identity theft or fraud,” Avis informed these whose private data was stolen within the incident.
“You can do this by regularly reviewing and monitoring your account statements and credit history for any signs of unauthorized transactions or activity. You can contact the credit reporting agencies if you suspect any unauthorized activity.”
The automotive rental firm additionally provided these affected a free one-year membership to Equifax’s credit score monitoring service, which supplies help with identification theft detection and backbone.
Avis is a subsidiary of Avis Funds Group, a number one international mobility options supplier that additionally owns Zipcar, the world’s main car-sharing community. Its Avis and Funds automotive rental manufacturers function over 10,000 rental areas in 180 international locations throughout North America, Europe, and Australasia. Avis Funds Group has reported greater than $3.0 billion in revenues for the second quarter of 2024.
The corporate has not responded to a number of requests for remark from BleepingComputer asking for extra details about the assault’s nature, the variety of affected clients, and the opposite private data stolen within the breach.