(NEXSTAR) — An unknown number of Hertz customers may have had some of their personal data stolen in a data breach impacting one of its vendors, the company confirmed Tuesday.

The data, a Hertz spokesperson told Nexstar, “was acquired by an unauthorized third party that we understand exploited zero-day vulnerabilities within Cleo's platform in October 2024 and December 2024."

A statement noted that Hertz the file transfer platform “for limited purposes.”

“Importantly, to date, our forensic investigation has found no evidence that Hertz's own network was affected by this event,” the statement continued. “However, among many other companies affected by this event, we have confirmed that Hertz data was acquired by an unauthorized third party that we understand exploited zero-day vulnerabilities within Cleo's platform in October 2024 and December 2024.”