Hertz Website - WARNING...
 

I just registered on the Hertz Website for their Frequent Renter program... and after inputting all my information, was given someone ELSE'S information...

Thinking it was a mistake, I logged out, logged back in and have full access to someone else's account... Address, email, Driver's licence, Credit card info... You name it.... And I can change any of it if I'd like to...

I would have just put this in the Hertz forum, but I figure this needs to be somewhere the largest number of people can see it....

This is a MAJOR problem.... If I have access to this person's information, who has access to mine?

KevinB

Whoa! http://www.flyertalk.com/forum/eek.gif
Never liked the Hertz website, too buggy. But this is probably better posted on the Hertz Forum under FT Miles.

Sounds like the experts behind continental.com are moonlighting again.

Doesn't do anything weird for me, but I do worry about someone else having access to my info. Have you contacted Hertz about the problem?

------------------
More Room Throughout Coach: the Website of Free Miles and Free Markets

I copied the text of the original posting & forwarded it to the Hertz Gold site "Contact Us" address.
Hope there are some Hertz lurkers on FT; probably another reason to copy this post to the Hertz board.

I copied the link & posted on the Hertz Board.

edited for Hertz linkage.
edditted fur speling the secund time.

[This message has been edited by kcvt750 (edited 12-29-2002).]

[This message has been edited by kcvt750 (edited 12-29-2002).]

http://www.flyertalk.com/forum/eek.gif

Thw worst part of the site is that you can't view history of rentals easily. Only if you do queries, that too only for a limited time. I would like to see a history of my #1 points.

This was almost as surprising as hearing TWA a while back was getting cons in prisons to handle ticket sales via 1-800 numbers.

Remeber the slogan, though, there's Hertz and then there's not exactly. Guess this time they were not exactly up to par on the web front.

MilesBuzz???????????????????

KevinB, contact the poor soul, and explain the situation to him or her. If you two work together, you can both sue, and likely get a nice settlement in exchange for being gagged by Hertz. Of course, you don't need to let them know you already posted it here.

I'm serious, get a good lawyer, stop couting miles, and start counting $$$.

Kevin:
A few questions:

1 - Were you at a "public" computer? Or your own?

2 - Was your ID somewhat common, like Kevin? And the password common as well? I know an admin who always uses PASSWORD as his password, and another woman that always uses 123456.

Tell us a bit more.

I was looking into booking a rental car for an upcoming (overnight) mileage run in Atlanta, and after booking a rental car online, decided to sign up for Hertz #1 Club...

I was using my home computer like usual... This was not a public computer, and I'm the only person that uses this computer.

I put in all my information - name, address, credit card info, picked a password, etc, and was given a membership number...

I then decided to check if there was anything else I needed to fill in, so went back to the main page... On that page, I suddenly realized that Hertz was welcoming SOMEONE ELSE...

That was when I went to change settings and found all of the other person's information... All the information on the page was his except the password and hint, which were mine...

The person lived in Florida, not California, and the only thing we had in common was our first name...

As soon as I realized how screwed up the whole thing was, I sent off an email to the person (since I knew what his email was...) telling him what happened, and how his privacy had been violated... I gave him my phone number if he wanted to talk to me to discuss what happened... He hasn't contacted me since... He may be away for all I know... I might give him a call tomorrow to make sure he is aware of what happened...

I also called Hertz to tell them about what happened, and the reservations person I spoke with actually GASPED when I told her.... She transferred me to the web support person, who on the other hand sounded like I was an annoyance... I was told that she would fill in a report and send it to her boss...

I explained just how major a problem this could be, but she really didn't care at all... It's scary to realize that I set up a reservation online with all of my information minutes earlier, and she couldn't find any record of it... God only knows it if my confirmation went to someone else's mailbox..... Cuz I never got the confirmation email EVER...

The web support person seemed to think I was a crank call, and seemed to think that it was a total fluke... It's scary that they put no importance on this potential security problem....

She put me on hold so often, and sounded so disinterested, that I finally hung up... I figure I at least alerted them.

If they aren't even interested enough to take care of it, they're going to set themselves up for a lawsuit when someone dishonest gets into another person's account...

KevinB

Back to an earlier question, was your username something that could jsut as well been this persons username? Maybe he was Kevin and you were KevinB? And what was the password, again, something simple?

On another note, if you called into Hertz in the off hours, the chance of getting someone intelligent drops quickly. Remember, the good people get the day shifts. The night people are usually those with low seniority.

I know, I know... that is a generalization, but generally true. I used to run call centers and know what happens when the good mgrs and supervisors go home.

Forgot to answer the password/name question...

The password I used was a combination of numbers and letters, and I didn't have a username... I was being assigned a member number, so there wasn't a user name yet....

Interestingly, this morning I got an email sending me my password again... Which scares me since I never asked for it....

KevinB

I guess Hertz found a job for their former spokesman, OJ.