Hertz is the flagship car-rental brand of Hertz Global Holdings, Inc. (NASDAQ: HTZ), which also operates Dollar and Thrifty and emerged from Chapter 11 bankruptcy in June 2021 sponsored by Apollo, Knighthead Capital Management and Certares Opportunities, entities that remain affiliated stakeholders through CK Amarillo. Hertz's own privacy policy discloses broad, multi-channel collection — including via kiosks, mobile apps and "Telematics devices" fitted to rental vehicles — plus collection of sensitive-category data in some countries, and it explicitly states personal information may be sold or otherwise monetized to unrelated third parties where permitted by law. The company does not honor browser do-not-track signals but participates in the Network Advertising Initiative's opt-out program. Hertz's FY2025 Form 10-K discloses ongoing class-action litigation over a 2025-disclosed data breach at Cleo Communications, a third-party file-transfer vendor, stemming from zero-day exploits in October and December 2024, alongside a formal cybersecurity risk-management (GISC) program and a risk-factor acknowledgment of past incidents affecting customer data.
TIMELINE
NO ENTRIES ON FILE YET.
TOOLS WE RECOMMEND
PLUS
RECEIPTS
7 ON FILE
[2021-01-18] · COLLECTION
Hertz's privacy policy states personal data is collected across many channels, including websites, kiosks, mobile apps, third-party social networks and "Telematics devices" fitted to rental vehicles, and separately discloses collection of "sensitive data" such as health conditions or trade-union membership in some countries.
Hertz Global Holdings' FY2025 Form 10-K states that in the normal course of business Hertz regularly collects, processes and stores information about millions of individuals and businesses, including payment card information and other sensitive and confidential personal information.
Hertz's privacy policy discloses the corporate/brand family it governs: The Hertz Corporation together with its rental and rental-related businesses, business affiliates and subsidiaries, expressly naming Dollar, Thrifty and Firefly.
Hertz Global Holdings, Inc.'s FY2025 Form 10-K (filed with the SEC, NASDAQ: HTZ) names its controlling "Plan Sponsors" as Apollo Capital Management, Knighthead Capital Management and Certares Opportunities, which sponsored the company's emergence from Chapter 11 bankruptcy in June 2021 and remain affiliated stakeholders; the filing further states Hertz Global owns 100% of The Hertz Corporation's issued and outstanding common stock.
Hertz's privacy policy explicitly states that personal information may be sold or otherwise monetized to unrelated third parties where permitted by law, in addition to routine disclosure to service providers, discount sponsors and licensees.
Hertz Global Holdings' FY2025 Form 10-K discloses that, starting April 15, 2025, multiple class-action complaints (later consolidated) were filed against Cleo Communications U.S., LLC — a file-transfer vendor for Hertz — and the company, alleging a data breach that may have exposed personal information during secure file transfers from Hertz's systems to third-party systems, via zero-day vulnerabilities exploited in October and December 2024; the same filing separately acknowledges Hertz has experienced past cybersecurity incidents resulting in threat actors obtaining customer personal information, and describes a board-level Global Information Security and Compliance (GISC) program.
Hertz's privacy policy states the company does not respond to browser do-not-track signals, while noting it adheres to the Self-Regulatory Principles for Online Behavioral Advertising and offers an opt-out via the Network Advertising Initiative's member-network program.