2022-09-09 U-Haul Holding Co /NV/ Cybersecurity Incident

Page last updated on April 11, 2024

U-Haul Holding Co /NV/ initially disclosed a cybersecurity incident in an SEC 8-K filing on 2022-09-09 16:04:23 EDT.

Incident Details

Material: Unknown
Is Breach: Unknown
Records Compromised: Unknown
Data Types Impacted: No Data Types Tracked (yet)

Compromised Date: 2021-11-05
Detected Date:
Disclosure Date: 2022-09-09
Contained Date:
Recovered Date:

Attack Goal: Unknown

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2022-09-09

U-Haul Holding Co /NV/ filed an 8-K at 2022-09-09 16:04:23 EDT
Accession Number: 0000004457-22-000081

Item 8.01 Other Events.

AMERCO (the “Company”) has been made aware of a data security incident involving U-Haul International, Inc.’s (“U-Haul”) information technology network. U-Haul detected a compromise of two unique passwords for accessing U-Haul’s contract search tool. U-Haul took immediate steps to contain the incident. Upon identifying the compromised passwords, U-Haul promptly enhanced its security measures to prevent any further unauthorized access and began an investigation. Cybersecurity experts were engaged to investigate the impact of the incident and are implementing additional security safeguards and controls to prevent further such incidents. None of U-Haul’s financial, payment processing or email systems were involved.

On August 1, 2022, the investigation by U-Haul into the incident determined certain customer contracts, including names, dates of birth and driver’s license numbers of some customers, were accessed using the compromised contract search tool between November 5, 2021 and April 5, 2022. U-Haul is taking steps to notify impacted customers, in addition to the appropriate governmental authorities. Impacted customers will be offered identity protection services at no charge.

The Company does not believe that the incident will have a material impact on its business or financial condition.

Security, in all forms, remains a critical priority at AMERCO, and the Company will continue to take all appropriate measures to safeguard the integrity of its information technology infrastructure.

Company Information