An Avis Budget Group data breach that exposed driver’s license details, birthdates and payment information could now leave some customers eligible for payouts of up to $5,000 — yet many may not realize the deadline to claim the money is only weeks away.
The settlement is tied to a cybersecurity incident that allegedly exposed customer information between Aug. 3 and Aug. 6, 2024. According to the official settlement website, the compromised data may have included names, driver’s license numbers, payment card details, expiration dates, phone numbers and birthdates connected to Avis rentals in the U.S.
Customers who can show documented financial harm linked to the breach may qualify for reimbursement of up to $5,000. That could include fraud losses, identity theft expenses, credit monitoring costs or unauthorized account activity. Even people who did not lose money directly may still qualify for a smaller cash payment under the agreement.
The filing deadline is June 21.
Avis denied wrongdoing as part of the settlement but agreed to fund the deal to resolve claims connected to the breach. For large consumer companies, prolonged data-breach litigation can quickly turn into an expensive public-relations problem as legal fees, customer notification costs and reputational damage continue building long after the original hack.
For customers, though, the fear is often more personal than financial.
A stolen credit card can usually be replaced within days. A leaked driver’s license number or birthdate can follow someone for years, resurfacing in fraud attempts, account verification problems or identity-theft disputes long after the original breach disappears from public attention.
Cyberattacks are becoming one of the fastest-growing costs facing major consumer brands, especially in travel, retail and finance. Companies are pouring money into cybersecurity defenses, insurance coverage and legal settlements as hackers target businesses holding large amounts of customer data.
At the same time, consumers are increasingly being pushed into the role of unpaid security monitors — checking bank statements, freezing credit files, replacing cards and watching for suspicious activity after breaches they had no control over in the first place.
Customers who believe they were affected must submit a claim online or by mail by June 21. Customers who want to exclude themselves from the settlement or formally object face a May 22 deadline. A final court hearing is scheduled for July 28.
For some drivers, the settlement money may help cover immediate losses. But the larger frustration is harder to erase. Once personal information begins circulating online, many people are left wondering how long they will need to keep looking over their shoulder.
