RIDEGURU
Crazy.
"Hackers stole the personal data of 57 million customers and drivers from Uber Technologies Inc., a massive breach that the company concealed for more than a year. This week, the ride-hailing firm ousted its chief security officer and one of his deputies for their roles in keeping the hack under wraps, which included a $100,000 payment to the attackers."
"Compromised data from the October 2016 attack included names, email addresses and phone numbers of 50 million Uber riders around the world, the company told Bloomberg on Tuesday. The personal information of about 7 million drivers was accessed as well, including some 600,000 U.S. driver’s license numbers. No Social Security numbers, credit card information, trip location details or other data were taken, Uber said."
Comments
100 grand? They could have asked for a lot more than that, and probably gotten it.
Is this even legal? How does Uber's accounting even file this mysterious bribe money of $100,000?
"Travis kalanick sweet sixteen party"
Expense Line Item: Information security contractor
"180 days to change". 180 DAYS TO CHANGE.
Aren't we only like 60 days in? What more else is out there?
Well, I mean, give them some credit -- at least they're telling us now.
Yeah but the cynical side of me thinks they had a whistleblower about to go public, and wanted to get ahead of the story...
This is why you don't negotiate with terrorists. They probably came back for more after they spent all the round 1 money.
"hey remember that thing...with the money.... Yeeeeeaaaaahh.... About that"
“None of this should have happened, and I will not make excuses for it,” Dara Khosrowshahi, who took over as chief executive officer in September, said in an emailed statement. “We are changing the way we do business.”
It's easy for Dara to admit this. This all happened before he showed up. How convenient.
A YEAR AGO?! 600,000 drivers?! 57 million users?
Don't worry. "In January 2016, the New York attorney general fined Uber $20,000 for failing to promptly disclose an earlier data breach in 2014."
So is my information out there?! Do I need to do something?
There isn't really much you can do except do your best to protect yourself from future hacks. Use different passwords on each site. Try using a password manager to keep track of them all.
This is shameful. Our data is OUT THERE now. Who's to say these guys won't just release it anyways? Or sell it to someone else on the sly?
Seriously. This is what bothers me about this. Uber has a duty to inform its customers that their information has been stolen, and they failed to do so. What a sham.
Uber hackers. Russian meddlers. What's new?