Hertz reported a data breach affecting over a million customers, with attackers exploiting vulnerabilities in third-party vendors to access personal data.