US moving and storage rental company U-Haul has suffered a data breach in which certain sensitive customer data was stolen, the company has confirmed.
In an announcement sent to affected customers, U-Haul said an unidentified threat actor managed to compromise two “unique passwords” and gain access to its contract search tool.
“The investigation found that an unauthorized person had access to the customer contract search tool and some customer contracts,” U-Haul said in the announcement, although it did not say how many customers were affected.
Payment details safe
Using the tool, the attackers managed to steal certain personally identifiable information: “After an in-depth analysis, our investigation on September 7, 2022 determined that access to the information contained your name and driver’s license or state identification number,” the announcement reads. .
U-Haul discovered the incident in mid-July 2022 and after a few weeks of investigation, discovered that the attackers had access to some customers’ leases signed between early November 2021 and early April 2022.
The company did not go into detail about how these accounts were compromised or whether the attackers were using malware or viruses (opens in new tab), but it did say that the passwords used to break into the system were changed in the wake of the breach to limit the blast radius of the attack. In addition, the company confirmed that no payment details had been stolen as the compromised tool had no access to such data in the first place.
“None of our financial, payment processing or U-Haul email systems were involved; access was limited to the customer contract search tool,” the company concluded.
To mitigate damage, U-Haul offers affected customers free identity theft protection (opens in new tab) services through Equifax, for 12 months. That way, customers can more easily track if someone is trying to misuse their identity online.
U-Haul is a large moving and storage rental company. According to BleepingComputer, it has a network of more than 23,000 locations in the US and Canada and has a fleet of some 186,000 trucks, 128,000 trailers and 46,000 tow bars. All of this, it was said, makes it the third largest self-storage operator in North America.
Through: BleepingComputer (opens in new tab)