U-Haul data breach affects customers in US, Canada

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

U-Haul data breach overview: 

• Who: U-Haul notified customers about a 2023 data breach it says affected about 67,000 customers in the United States and Canada. 
• Why: U-Haul says an unauthorized individual used legitimate credentials to access a system that tracks customer reservations and views customer records. 
• Where: The U-Haul data breach affected consumers in the United States and Canada. 

U-Haul notified customers about a 2023 data breach of a system used by the moving truck, trailer and self-storage rental company to track customer reservations and view customer records. 

The company says the data breach affected around 67,000 customers in the United States and Canada, Bleeping Computer reports. 

In a sample letter filed with the Office of the Maine Attorney General, U-Haul attributed the data breach to an unauthorized individual using legitimate credentials and says it exposed the birthdates, names and driver’s license numbers of those affected. 

“Upon discovering this incident, U-Haul initiated their response protocol and a cybersecurity firm was engaged to conduct an investigation,” the company writes in the letter. 

U-Haul data breach lasted more than 3 months, company says

U-Haul says the data breach lasted from July, 20, 2023, to Nov. 2, 2023, and discovered the incident more than two months later on Dec. 5, 2023. 

The company began mailing notification letters to affected customers Feb. 22 and is offering one year of free credit monitoring and identity theft protection services with Experian as a precaution, the letter states.

U-Haul also says it took steps to enhance its existing security measures by changing the passwords for affected accounts and implementing additional safeguards and controls.

Consumers with more questions about the U-Haul data breach can contact the company directly at (866) 963-0620. 

A consumer filed a class action lawsuit against U-Haul in Sept. 2022 over claims it failed to put the proper security in place to prevent a seven-month long data breach that exposed customer information. 

Were you affected by the U-Haul data breach? Let us know in the comments.

Read About More Class Action Lawsuits & Class Action Settlements:

• $2.5M settlement reached in Dollorama class action
• Refund must be issued to customer who received false info from Air Canada chatbot, tribunal rules
• Dole announces salad recall related to national dairy recall
• NHL, CHL, junior leagues hit with exploitation antitrust class action lawsuit