Uber discloses data breach one year after it happened

Lena Tucker
November 23, 2017

Uber is coming clean about its cover-up of a year-old hacking attack that stole personal information about more than 57 million of the beleaguered ride-hailing service's customers and drivers.

57 million riders and drivers were affected by a 2016 data breach, which Uber attempted to cover up by paying off the hackers to stay silent.

United Kingdom authorities were unaware of a mass data breach at Uber that potentially put British customers' personal details into the hands of cyber criminals.

And the cyber-thieves made off with 600,000 USA driver records that included their license numbers. He was not at the helm when it happened. A collection of information of rider and driver was included in the AWS database which the hackers downloaded to ransom the company.

According to Bloomberg, Uber allegedly paid the hackers $100,000 to delete the data and keep the breach quiet.

It's been reported that nobody's credit card information, bank details or dates of birth were stolen in the hack.

The hack is another controversy for Uber on top of sexual harassment allegations, a lawsuit alleging trade secrets theft and multiple federal criminal probes that culminated in Kalanick's ouster in June.

It said the breach, from mid-May through July, could affect more than 145 million USA customers as well as Canadian and British clients.

"While we have not seen evidence of fraud or misuse tied to the incident, we are monitoring the affected accounts and have flagged them for additional fraud protection", Khosrowshahi said in a statement. The New York attorney general has opened an investigation into the data breach, a spokeswoman said.

If you're a user of Uber, it's possible your personal information was hacked in 2016 without you even knowing.

Uber said it was in the process of notifying various regulatory authorities but declined to comment further.

Uber also tightened security for its cloud-based storage systems, according to the company.

After Khosrowshahi took over for Kalanick in August, the former Expedia CEO appeared poised to lead Uber in a new, scandal-free direction.

The data was swiped by an employee from the personal credit ratings firm Korea Credit Bureau who then sold it to telemarketing companies.

"Uber CEO Dara Khosrowshahi's statement that there is no excuse for what happened and Uber will be putting integrity and trust at the core of every business decision is a welcome message", he said. The company has been embroiled in a number of controversies, including using software called Greyball to evade regulators, a court battle over allegedly stolen secrets from Google's self-driving auto division, and a slew of complaints regarding sexual harassment and toxic company culture.

Other reports by AllAboutTopnews

Discuss This Article