The car rental company attributed the breach to Cleo, whose customers suffered a data theft by a ransomware group in 2024.
Small and medium-sized enterprises in the manufacturing sector are being significantly affected.
Tens of thousands of websites received spam messages.
A group called Storm-2460 is exploiting a vulnerability to deploy the RansomEXX variant.
The leak site on the dark web of the ransomware group warns: "Do not commit crimes."
"Critical infrastructures are the main target, warns a report."