Uber hid hack that exposed data of 57 million users, drivers

From CNET: Uber revealed Tuesday that hackers stole data on 57 million drivers and riders in October 2016, the ride-hailing company said on Tuesday.

The pilfered data included personal information such as names, email addresses and driver's license numbers, the company said. Social Security numbers and credit card information, however, didn't appear to have been compromised.

Dara Khosrowshahi, Uber's new CEO, and the company said in a trio of statements that he learned of the breach "recently," but the company had discovered it in November 2016. Uber paid $100,000 for the data thieves to delete the information at the time.

The data was stored on an Amazon Web Services cloud account, and "two individuals outside the company" accessed and downloaded the information, he said. The company believes the data has since been deleted, he added, and there are no signs of fraud stemming from the breach.

The company now believes it had a legal obligation to disclose the breach.

"None of this should have happened, and I will not make excuses for it," Khosrowshahi said. "While I can't erase the past, I can commit on behalf of every Uber employee that we will learn from our mistakes."

View: Article @ Source Site