Moving and storage giant U-Haul International (U-Haul) has suffered a data breach after a customer contract search tool that allows access to rental contracts for U-Haul customers was compromised.
The company said that an unauthorized party accessed some rental contracts using compromised passwords between November 5, 2021, and April 5, 2022. The information accessed included customers’ name and driver’s license or state identification number. How attackers had managed to compromise passwords U-Haul hasn’t said.
Upon detecting the breach the company changed the passwords to prevent any further unauthorized access to the search tool.
U-Haul has not disclosed how many customers were impacted in the data breach, but said that the incident did not affect payment card information.