Hertz worked with file-transfer platform Cleo, which was impacted by a software vulnerability last year, allowing scammers to scoop up data on customers of the car rental service.