2022-09-09 U-Haul Holding Co /NV/ Cybersecurity Incident

Page last updated on September 24, 2025

U-Haul Holding Co /NV/ initially disclosed a cybersecurity incident in an SEC 8-K filing on 2022-09-09 16:04:23 EDT.

Incident Details

Material: No
Is Breach: Yes
Records Compromised: Unknown
Data Types Impacted: Password, Driver License Number, Date of Birth, Name

Compromised Date: 2021-11-05
Detected Date: Unknown
Disclosure Date: 2022-09-09
Contained Date: Unknown
Recovered Date: Unknown

Attack Goal: Unknown
Attack Tactics¹: TA0006
Attack Techniques¹: T1078

Costs: No Costs Tracked (yet)

Filings

8-K filed on 2022-09-09

U-Haul Holding Co /NV/ filed an 8-K at 2022-09-09 16:04:23 EDT
Accession Number: 0000004457-22-000081

Item 8.01 Other Events.

AMERCO (the "Company") has been made aware of a data security incident involving U-Haul International, Inc.'s ("U-Haul") information technology network. U-Haul detected a compromise of two unique passwords for accessing U-Haul's contract search tool. U-Haul took immediate steps to contain the incident. Upon identifying the compromised passwords, U-Haul promptly enhanced its security measures to prevent any further unauthorized access and began an investigation. Cybersecurity experts were engaged to investigate the impact of the incident and are implementing additional security safeguards and controls to prevent further such incidents. None of U-Haul's financial, payment processing or email systems were involved.

On August 1, 2022, the investigation by U-Haul into the incident determined certain customer contracts, including names, dates of birth and driver's license numbers of some customers, were accessed using the compromised contract search tool between November 5, 2021 and April 5, 2022. U-Haul is taking steps to notify impacted customers, in addition to the appropriate governmental authorities. Impacted customers will be offered identity protection services at no charge.

The Company does not believe that the incident will have a material impact on its business or financial condition.

Security, in all forms, remains a critical priority at AMERCO, and the Company will continue to take all appropriate measures to safeguard the integrity of its information technology infrastructure.

Company Information