U-Haul Sued Over Data Breach Affecting 2.2 Million Customers

Moving and storage company U-Haul International Inc. violated the Driver’s Privacy Protection Act and negligently failed to safeguard personal customer information during a 5-month security breach, according to a proposed class action filed in Arizona federal court.

U-Haul customer Felicia Durgan claimed she and others face a lifetime risk of their personal information being sold on the dark web after an individual gained access to some of U-Haul’s rental contracts, in a complaint filed in the US District Court for the District of Arizona Friday.

Two compromised passwords resulted in the security breach of the company’s contract search tool, which ...