In this episode, we delve into the Hertz data breach, impacting customers across the US, Canada, UK, EU, and Australia. The breach, confirmed by Hertz on February 10, 2025, stemmed from zero-day vulnerabilities exploited in October and December 2024 within Cleo’s file transfer platform, a third-party vendor used by Hertz. Compromised data includes driver's licenses, payment card information, and passports, along with names, contact details, and dates of birth. Hertz has offered two years of identity monitoring services through Kroll to affected individuals, highlighting critical supply chain security risks for all businesses