Data of nearly 300,000 exposed in Avis cyberattack