U-Haul

U-Haul International, Inc. suffered a data breach after the two passwords were compromised, allowing unauthorized party access to the company’s contract search tool.

The breach compromised the names and driver’s license numbers or state identification numbers of certain individuals.

The incident apparently impacted the personal information of 5,568 people in Montana alone, the number of impacted individuals is still unknown, however, it started notifying the impacted individuals.

Source: https://www.jdsupra.com/legalnews/u-haul-international-inc-files-notice-3404267/

TPRM report: https://scoringcyber.rankiteo.com/company/u-haul-international-inc-

"id": "uha1933151122",
"linkid": "u-haul-international-inc-",
"type": "Breach",
"date": "09/2022",
"severity": "80",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '5,568 people in Montana alone',
                        'industry': 'Moving and Storage',
                        'name': 'U-Haul International, Inc.',
                        'type': 'Company'}],
 'attack_vector': 'Compromised Passwords',
 'data_breach': {'number_of_records_exposed': '5,568 people in Montana alone',
                 'personally_identifiable_information': ['Names',
                                                         'Driver’s License '
                                                         'Numbers',
                                                         'State Identification '
                                                         'Numbers'],
                 'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Personally Identifiable '
                                              'Information']},
 'description': 'U-Haul International, Inc. suffered a data breach after two '
                'passwords were compromised, allowing unauthorized party '
                'access to the company’s contract search tool.',
 'impact': {'data_compromised': ['Names',
                                 'Driver’s License Numbers',
                                 'State Identification Numbers'],
            'systems_affected': ['Contract Search Tool']},
 'initial_access_broker': {'entry_point': 'Compromised Passwords'},
 'response': {'communication_strategy': 'Notifying impacted individuals'},
 'title': 'U-Haul Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Weak Password Security'}