Critical cyberattack on Avis Car Rental compromises personal information of 300,000+ customers

Avis Budget Group, the parent company of Avis, Budget, and Zipcar, has confirmed a significant data breach that compromised the personal information of hundreds of thousands of customers. The company revealed the breach in a series of filings with state attorneys general, stating that unauthorized access to one of its business applications occurred between August 3rd and 5th.

The stolen data includes names, addresses, email addresses, phone numbers, dates of birth, credit card details, and driver’s license numbers. Avis has not disclosed the specific nature of the cyberattack or how the attackers gained access to its systems.

While the exact number of affected individuals is still being determined, filings with Maine and Texas indicate that the breach has impacted at least 299,066 people. Texas has the highest number of affected residents, with 34,592 individuals impacted.

Avis has not provided details about its cybersecurity practices or the steps it is taking to prevent future breaches. The company’s failure to adequately protect customer data raises questions about its security protocols and the oversight of its cybersecurity operations.