Hertz Data Breach Mass Arbitration: Your Rights and Next Steps

In early 2025, Hertz Global Holdings confirmed a massive data breach that exposed sensitive customer information across its rental car brands, including Hertz, Dollar Car Rental, and Thrifty. 

The fallout has been swift: multiple claims have been filed in states like Florida and Illinois, alleging negligence and reckless data handling by the company. For millions of affected customers, these lawsuits represent both accountability and a potential path toward compensation.

If you’re wondering whether you qualify for a claim or what steps you should take next, this guide breaks down everything you need to know.

Overview of the Hertz Mass Arbitration Lawsuits

Shortly after Hertz disclosed the breach, lawsuits began to appear in federal courts. At least two major lawsuits have already been filed, one in Florida and another in Illinois, where large groups of customers were affected. 

These lawsuits represent individuals whose personal data, including driver’s license numbers, payment card details, and other sensitive information, was compromised during the breach.

The lawsuits argue that Hertz failed to take adequate steps to safeguard customer information, despite being in an industry where strict data security is both expected and legally required.

Legal Claims Against Hertz

The claims share common allegations, including:

• Negligence: Hertz allegedly failed to implement reasonable security protocols that could have prevented or minimized the breach.
• Reckless Data Handling: Plaintiffs claim the company stored personal data in ways that made it vulnerable to cyberattacks.
• Delayed Notification: Although the breach reportedly occurred between October and December 2024, Hertz did not disclose it until February 2025. Plaintiffs argue that this delay prevented customers from taking timely protective measures.

Taken together, these claims paint a picture of corporate responsibility falling short—and customers bearing the consequences.

What the Plaintiffs Want

The individuals bringing these lawsuits are asking the courts for a combination of remedies, including:

• Monetary Damages: Compensation for identity theft risks, fraudulent charges, credit monitoring expenses, and the time and stress caused by the breach.
• Injunctions: Court orders requiring Hertz to adopt stronger cybersecurity practices going forward.
• Improved Security Measures: Mandatory implementation of modern safeguards, audits, and employee training to prevent similar breaches.

Mass Arbitration vs. Class Action: What’s the Difference?

In addition to class actions, some lawyers may pursue mass arbitration as a strategy. Here’s how the two compare:

• Mass Arbitration: Instead of one big case, thousands of individuals file separate arbitration claims against the company at once. This can pressure a defendant into settlements because arbitration fees multiply quickly.
• Class Action: A large group of plaintiffs bands together in a single lawsuit. The court decides on behalf of the whole class, and compensation is distributed to all eligible members.

Both approaches aim to hold corporations accountable, and both can lead to compensation.

Eligibility: How to Know if You’re Part of the Lawsuit

You may be eligible to join the Hertz lawsuit if:

• You rented a car through Hertz, Dollar Car Rental, or Thrifty between October 2024 and February 2025.
• You received a data breach notification letter or email from Hertz.
• You can show that your personal information was compromised in connection with the breach.

Even if you haven’t noticed fraudulent charges yet, exposure of sensitive data alone may qualify you to participate.

How to Join the Hertz Lawsuit

If you meet the eligibility criteria, here’s how to get involved:

1. Check for Notifications: Look for letters or emails from Hertz confirming your data was exposed.
2. Register with the Court-Appointed Administrator: If the lawsuit moves forward, the court will appoint an administrator who will manage claims and notify affected individuals.
3. Submit a Claim Form: This usually requires basic information about your rental history, breach notification, and any losses you’ve incurred.
4. Seek Legal Guidance: An attorney can ensure your claim is filed correctly and help maximize compensation.
   
    

Timeline: What to Expect

Data breaches can take months or even years to resolve. Here’s a typical timeline:

• Filing: Plaintiffs file lawsuits (already underway in Florida and Illinois).
• Class Certification: Courts decide whether the cases meet requirements to proceed.
• Discovery & Motions: Both sides exchange evidence and argue over key legal points.
• Settlement or Trial: Many data breach cases settle before trial, leading to payouts for class members.

While slow, these cases often result in meaningful compensation and important reforms in how companies handle data.

Tips for Affected Customers

If you think you’ve been affected by the Hertz breach, here’s what you should do:

• Save Documentation: Keep copies of your Hertz data breach notification and any records of fraudulent charges or credit monitoring costs.
• Monitor Case Status: Check court websites or law firm updates for news about the lawsuits.
• Protect Your Identity: Consider freezing your credit, monitoring your accounts, and using identity theft protection services.

Am I affected by the Hertz data breach?

If you rented a car through Hertz, Dollar, or Thrifty during the breach period and received a notification letter, you may be eligible to join the Hertz lawsuit.

How do I join the lawsuit?

Most data breaches automatically include affected individuals, but you’ll need to submit a claim form to receive compensation once a settlement is approved.

Is there a cost to me to join the Hertz lawsuit?

No. Morgan & Morgan’s mass arbitration lawyers work on a contingency basis, meaning we only get paid if the lawsuit succeeds, and that will come from the settlement or verdict, not from your pocket.

What’s the difference between class action and mass arbitration?

Class actions group plaintiffs together in one lawsuit, while mass arbitration involves many individuals filing separate claims. Both can lead to compensation.

Most importantly for victims of the Hertz data breach, mass arbitration lawsuits give consumers a way to stand up against corporate negligence and push for stronger protections. 

If you rented a vehicle from Hertz or its affiliated brands during the breach window, it’s worth confirming whether you’re eligible to join. Contact Morgan & Morgan today for a free case evaluation to learn if you could join the lawsuit.