In a recent cyberattack, car rental giant Avis fell victim to a breach that exposed the sensitive information of almost 300,000 individuals across several U.S. states. The breach, which occurred in early August, has sparked concern regarding data privacy and security, particularly in light of the increasing amount of personal data synced to rental vehicles.
According to reports, Avis discovered the breach on August 5th. An internal investigation revealed that hackers had gained access to the company’s systems between August 3rd and August 6th. By mid-August, Avis confirmed that names and other personal information had been compromised. However, details about the specific data accessed remain unclear. In response, Avis is offering affected individuals one year of free credit monitoring services.
Breach notification letters have been filed with state regulators in California, Maine, Texas, Massachusetts, Vermont, and other states. A filing in Maine indicates that 299,006 people were impacted by the breach, though Avis has not provided a specific breakdown of the stolen data. The company has also remained silent on how many total customers were affected nationwide.
This cyberattack comes at a time when car rental companies are expanding their data collection practices, raising concerns about customer privacy. Many renters sync their smartphones with vehicles, inadvertently transferring personal information—such as contacts, messages, and location data—back to agencies like Avis when they return the cars. This has only heightened fears about the security of sensitive data in the hands of rental companies.
Avis, headquartered in New Jersey, is one of the largest car rental companies in the U.S., competing with other industry giants like Hertz, Enterprise, and Budget. In the second quarter of 2024 alone, Avis reported revenues of $3 billion. Despite the company’s success, this breach has rattled customer confidence.
The incident bears similarities to a data breach earlier this year involving U-Haul, which saw the driver’s license numbers and other personal identification of 67,000 individuals in the U.S. and Canada exposed during a cyberattack. As data security remains a growing concern, these breaches underscore the need for better safeguards in an increasingly interconnected world.
With customer trust on the line, Avis—and the entire car rental industry—may face mounting pressure to enhance their cybersecurity measures.

