PHP Vulnerability Responses by Company

The Hertz Corporation

Companies / web services
Aliases / services
Hertz / ハーツ / Dollar / Thrifty / The Hertz Corporation
Official website
https://www.hertz.com/
Sources identifying the operating company

Each response applies only to its stated service scope. “Not listed” does not mean unpatched or unaffected.

Response status by service

Hertz, Dollar and Thrifty data transferred through Cleo

Response status
Not listed
Response information checked
2026-10-30

Current re-audit: Related incident verified; PHP connection not stated · Research date: 2026-10-30

On February 10, 2025 Hertz confirmed acquisition of its data through Cleo vulnerabilities exploited in October and December 2024. The personal data involved varies by notification.

Scope: A PHP connection and response to the current PHP vulnerabilities are not listed.

What users should do

Review statements and credit reports and report unauthorized activity. Consider a credit freeze; any historical monitoring offer is subject to the individual notice's deadline and eligibility.

Official service URL

Source URLs

  1. Official operator evidencehttps://oag.ca.gov/system/files/PDF%20-%20CA%20Notice%20Letter%20-%204-11-25.pdfService and operation documentation
Related official sources
  1. Official operator evidenceOfficial information directoryIdentifies The Hertz Corporation and the relevant scope.
  2. Official incident noticeOfficial notice; link to this PHP incident unconfirmedIncident scope and guidance for affected people.

Comments