Avis Rent A Car customers affected by a data breach that ran from August 3 through August 6, 2024, face a June 21 deadline to file claims worth up to $5,000. The company submitted formal breach notifications to state regulators in California and Maine, confirming that personal information was exposed during the incident. With barely a week left before the filing window closes, affected renters must act quickly or risk forfeiting any potential recovery.
Why the June 21 Filing Deadline Pressures Avis Customers
The tight claims window creates an asymmetry between two groups of affected people. Customers who received direct notice from Avis, through letters the company sent after filing with state attorneys general, had months to prepare. But many breach victims never open or act on those notices. A separate group learned about the breach only through news coverage or social media chatter, often much later. Those latecomers now face the same hard cutoff with far less preparation time.
That gap matters because response rates in data breach settlements tend to skew toward people who encounter the story through secondary channels rather than official mail. Direct-notice recipients often discard unfamiliar legal correspondence. People who read about a breach in a news article, by contrast, arrive with enough context to act. The compressed timeline amplifies that pattern: anyone who first heard about the Avis breach in recent days has only until June 21 to gather documentation and submit a claim.
For affected drivers, the practical consequence is simple. Missing the deadline means losing access to compensation that could reach $5,000 per claimant. No extension has been announced, and settlement administrators typically enforce cutoff dates without exceptions for late discovery. That makes it crucial for renters who used Avis during the breach window to review any mailed notices or emails they may have overlooked and to check whether they qualify for relief under the claims program.
State Filings That Document the Avis Breach Timeline
The strongest public evidence comes from two state-level regulatory filings. Avis Rent A Car System LLC submitted a breach notification sample to the California attorney general, indexed as SB24-591235. That filing establishes the breach dates as August 3, 2024, through August 6, 2024, and serves as the authoritative record for the incident timeline.
Separately, the Maine attorney general maintains its own repository entry for the same incident, including a copy of the consumer notification letter Avis sent to affected individuals. Together, these two state records confirm that the breach was real, that Avis acknowledged it through official channels, and that consumers were notified.
Neither filing publicly discloses the total number of affected individuals or specifies which categories of personal data were compromised. The California index page links to a PDF notice, and the Maine repository hosts the consumer letter, but the full text of those documents has not been reproduced in the public-facing registry pages. That leaves affected customers relying on whatever details appeared in the letters they received directly, including any description of the information at risk and the steps Avis recommended in response.
These filings sit within broader transparency efforts around consumer protection and cyber incidents. In California, for example, the state’s OpenJustice portal aggregates public data sets and regulatory information, including certain records tied to privacy and enforcement. While the Avis breach notice itself appears in a specialized data breach index, it fits into this larger push to make corporate disclosures more accessible to the public.
Open Questions About Claims, Eligibility, and the $5,000 Cap
Several gaps in the public record complicate the picture for potential claimants. No primary government source currently available contains the full settlement agreement, so key details about who qualifies, which losses are reimbursable, and how the $5,000 maximum applies are not spelled out in the state-hosted materials. The California and Maine entries confirm that Avis sent notices and that a breach occurred, but they do not describe the structure of any compensation fund or administrative process.
That uncertainty raises practical questions. Potential claimants may not know whether they must document out-of-pocket losses, such as credit monitoring or time spent resolving fraud alerts, or whether the program also offers flat payments for exposure of personal data alone. It is also unclear whether the $5,000 figure represents a hard cap per person, a tiered limit depending on proof of harm, or a ceiling that only applies to the most severe documented losses.
Without a publicly posted settlement agreement, renters must rely on the instructions contained in their individual notification letters or on information provided by the settlement administrator’s website or call center, if one has been established. Those materials typically explain how to submit a claim, what documentation to include, and how the administrator will evaluate requests. They may also outline whether identity theft incidents that arise after the filing deadline can be linked back to the breach for supplemental relief.
In the meantime, the safest course for anyone who rented from Avis around early August 2024 is to assume that inaction carries the highest risk. Even if a customer is unsure whether their information was compromised, filing a timely claim preserves their place in the process and allows the administrator to make an eligibility determination. Waiting until after June 21 removes that option entirely, leaving affected drivers with no direct avenue to seek reimbursement tied to this particular breach.



