U-Haul International

Disclosed Sep 9, 20224 years ago2,195,831 affectedConfirmed

What is known

People affected	2,195,831 (as reported by the organization)
Disclosed	Sep 9, 2022
Discovered	Sep 7, 2022
Happened	Nov 5, 2021
Attack	Hacking
Data exposed	Names
Sector	Other · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: U-Haul Internationaloag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: U-Haul Internationalatg.wa.gov · Official notice	Official notice
Notice letter filed with the Delaware DOJ: U-Haul Internationalattorneygeneral.delaware.gov · Official notice	Official notice
Oregon DOJ breach notice: U-Haul Internationaljustice.oregon.gov · Official notice	Official notice
Indiana Attorney General 2022 data breach report: U‐Haul Internationalin.gov · Official notice	Official notice

Where	Filed	People
California AGresidents of CA	Sep 9, 2022
Washington AGresidents of WA	Sep 9, 2022	61,770
Delaware DOJresidents of DE	Sep 9, 2022	4,903
Oregon DOJresidents of OR	Sep 9, 2022	2,195,831
Indiana AGresidents of IN	Sep 9, 2022	36,557

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Feb 22, 2024Feb 22, 20242 years agoHacking	Feb 22, 20242 years ago	Hacking	Other	Confirmed	Unknown

History of this record

2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/2022-DB-Year-to-Date-Report-for-Website.pdf · backfill source
2026-09-25 · data_types: [] to ["names"] · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 2195831 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · discovered: empty to 2022-09-07 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.