Heads Up, Renters: Avis Confirms Data Breach Exposing Customer Information
Last updated:
Calling all recent Avis renters: The car rental company has confirmed a data breach that potentially exposed customer information. The incident, which occurred between August 3rd and 6th, 2024, targeted one of Avis’s business applications, compromising names and other undisclosed details.
New Jersey-based rental car giant Avis has reported a data breach affecting 299,006 individuals. In this breach, bad actors accessed sensitive customer information such as names, addresses, emails, phone numbers, birth dates, credit card details and driver’s license numbers. A filing with Maine’s attorney general disclosed the breach. Texas is the most affected state, accounting for 34,592 individuals. Avis also owns the Budget car rental and Zipcar car-sharing brands.
What We Know So Far:
- The breach window: August 3rd to 6th, 2024.
- Affected data: Customer names and other undisclosed details.
- Affected systems: One of Avis’s business applications.
- Avis’s response: Sent notification letters to affected individuals, reported the incident to California’s Office of the Attorney General, and offered a free one-year credit monitoring service through Equifax.
What You Should Do:
While the specific details of the exposed information haven’t been disclosed, it’s always better to be cautious in the wake of a data breach. Here’s what you can do:
- Monitor your accounts: Keep an eye on your bank statements and credit card reports for any suspicious activity.
- Be wary of phishing attempts: Scammers may try to capitalize on the breach by sending emails or making calls disguised as legitimate entities. Avoid clicking on suspicious links or attachments, and never reveal personal information over the phone unless you’ve initiated the contact.
- Consider a credit freeze: A credit freeze can prevent unauthorized access to your credit report, making it harder for criminals to open new accounts in your name.
- Take advantage of the free credit monitoring: If you received a notification letter from Avis offering a free year of credit monitoring, it’s a good idea to sign up for this service.
Data Security Concerns Remain:
This incident serves as a reminder of the importance of data security. Companies entrusted with our personal information have a responsibility to implement robust security measures to protect against unauthorized access. While Avis has acknowledged the breach and taken steps to address it, the lack of detailed information regarding the exposed data and the specific business application targeted leaves some room for concern.
Staying Vigilant in the Digital Age:
As data breaches become increasingly common, it’s crucial to remain vigilant about protecting your personal information. By being proactive with monitoring your accounts, avoiding phishing attempts, and considering steps like credit freezes, you can minimize the potential impact of such incidents.
Breaches like this often lead to follow-up scams that use the stolen details. Our guide to invoice and payment fraud explains what to watch for, and our cybersecurity services for small businesses cover phishing protection and staff training.
Related reading: proactive cybersecurity services, Grubhub Data Breach: A Wake-Up Call for Businesses.
Request an IT assessment
Tell us a little about your business and a PDX IT team member will follow up to schedule an assessment. Prefer to talk? Call 971-331-4871.
About the author: Steve Shaff
Steve Shaff is the owner of PDX Information Technology Services, a managed IT provider he founded in 2020. From the Tualatin office he helps businesses across Portland Metro & Southwest Washington with IT support, cybersecurity and compliance. More about Steve · Contact PDX IT
Modern ransomware gangs don’t just lock your files. They copy your data first, then threaten to publish or sell it on the dark web. Here is how double extortion works and what Portland-area small businesses can do before, during and after an attack.
Portland small business mobile security checklist: lock phones, avoid risky public Wi-Fi, secure office wireless, spot text scams and handle lost phones.
Portland employee offboarding IT checklist: lock Microsoft 365, save the mailbox and OneDrive files, change shared passwords and wipe company devices.