hertz.com Domain Breach Exposure Report

The telemetry indicates a significant exposure impacting Hertz, with 99,330 historical data breaches and 13,003 active infostealer logs observed over the reporting period. The data breaches represent 88.4% of the total events, while infostealer activity accounts for 11.6%. The timeline shows a substantial spike in employee and client-related events in January 2026, with 17,557 employee events and 5,895 client events, followed by continued high volumes throughout the first half of 2026. Malware families such as Rhadamanthys, LummaC2, and Redline are prevalent, suggesting active credential harvesting and data exfiltration attempts. The primary targeted services are related to Hertz's core operations, including reservations, login portals, and member enrollment, with the United States being the most affected geography. The high volume of historical data breaches and active infostealer logs, coupled with the targeting of critical services like login and reservation portals, elevates the risk to Hertz. The prevalence of common infostealer malware families indicates a persistent threat to employee and client credentials. Remediation efforts should focus on strengthening authentication mechanisms, enhancing endpoint security to detect and prevent infostealer infections, and conducting thorough investigations into the root causes of the historical data breaches to prevent recurrence. Prioritizing the investigation of the January 2026 spike in employee and client events is crucial for understanding the immediate impact and potential ongoing compromise.