2023 U-Haul — 67k customers, stolen credentials
Data compromised
Names, DOB, driver's license numbers
Technical writeup
U-Haul admitted that thousands of customers had data stolen in a breach. The breach was caused by stolen credentials that allowed attackers to access customer information including names, dates of birth, and driver's license numbers.
Root cause
Stolen credentials; unauthorized access