Latest / California / February 2024
U-Haul International, Inc.
U-Haul International, Inc. notified California AG on Feb 22, 2024 of a data breach, which occurred on Oct 2, 2023. Data exposed: Date of birth, Usernames / passwords, Name.
All 5 filings by U-Haul International, Inc., state by state · Case file (dates, days to notice against the statute, what the letter offers, prior incidents)
- Organization
- U-Haul International, Inc.
- Source
- California AG · source record
- Date reported
- Feb 22, 2024
- Date(s) of breach
- Thursday, July 20, 2023Monday, October 2, 2023
- Residents affected
- Not published by this source
- Data exposed
- Date of birth Usernames / passwords Name
- Notice letter
- Sample notice (PDF)
- Discovered
- Dec 5, 2023, as stated in the letter"U-Haul learned on December 5, 2023, that legitimate credentials were used by an unauthorized party to access a system U-Haul Dealers and Team Members use to track customer reservations and view customer records."
- Days to notice
- 79 days from discovery (Dec 5, 2023) to the California record (Feb 22, 2024). Statute: 30 days from discovery or notification of the breach (Cal. Civ. Code § 1798.82). Over the statutory period
- Offered in the letter
- 12 months of credit or identity monitoring through Experian
- First seen by BreachTally
- 2026-10-30 15:41 UTC
Dates and counts as filed by the organization with the agency. The breach window and the report date often differ by months.
Not today? Take the free Monday digest: the week's filings by state and the largest by people affected. Once a week.
Other filings by U-Haul International, Inc.
| Organization | State | Reported | Residents affected |
|---|---|---|---|
| U-Haul International, Inc. | OR | Feb 22, 2024 | 57,177 |
| U-Haul International, Inc. | OR | Sep 9, 2022 | 2,195,831 |
| U-Haul International, Inc. | CA | Sep 9, 2022 | Not published |
| U-Haul International, Inc. | DE | Sep 9, 2022 | 4,903 |
Data reproduced from a public government filing. Spot an error? Email support@breachtally.com with the record link. Corrections are applied and noted.