Hackers Stole Data From 57 Million Uber Drivers and Customers, Uber Paid $100K to Hide Attack

I loved Uber. But value my privacy.

If something like this happens. Come clean. Don’t hide it.

Will stick to taxis.
 
A former NSA employee on board makes everyone feel confident about the security of the private data in 3-2-1 ...
 
now i see it said:
All the hackers got were names and email addresses (of riders). Big deal.
Click to expand...
Don’t forget about 600,000 drivers license numbers. And who knows what else? Your source is Uber. You think that Uber, a company with a history of bad behavior, a company that paid hackers a ransom and then kept it quiet for a year (in violation of state law, btw) was open and honest about what kind of data was stolen?
 
kildraik said:
Uber is as shady as most of their drivers. Astonishing, yet unsurprising given their history.
Click to expand...
Good way to stereotype drivers. Why are MOST of their drivers(me being one) shady? Do you have any idea what drivers go through dealing with a lot of passengers?
 
Well I already had my **** stolen two years ago so, guess this wont affect me much. Make sure you guys freeze your credit lines with a pin number.
 
Packers1958 said:
You actually think the hackers deleted the info? They hoodwinked Uber out of $100,000, and made some more money selling the info.
Click to expand...

After doing some more reading, I now think it was a bad assumption on my part to think that they ever even planned to sell the info.

Snce Uber knew who the guys were, they might've been able to send authorities after them. But that would've likely made things go public.

That's why it sounds like the two hackers contacted Uber to tell about how they breached things, and probably mentioned it would be revealed in a symposium. Whereupon the execs responsible for security offered to pay them to keep it quiet and delete the evidence.

In short, I now don't think there was any danger of the info being sold. I think this was instead an internal attempt to cover up lax security. Which is of course still bad, but was not a danger to us.
 
Paid the hackers to proactively delete it, or were held to ransom?

The lack of transparency is awful. Good luck getting your license back in London now!
 
deany said:
If this is just a “big deal”, would you voluntarily post your name, phone number, email, and home address in this thread?
Click to expand...

How is that the same thing at all? No, I'm not going to post my info on a public forum, but I'm also not going to stomp my feet and whine about Uber because someone got my phone number and email address.

And this doesn’t even touch that they actively tried to cover this up.
Click to expand...

You must have been screaming from the rooftops about the Equifax breach, then.
[doublepost=1511366120][/doublepost]
69Mustang said:
Perhaps you can provide an example where Uber was unfairly targeted.
Click to expand...

You mean like that one time that an IP address used by Lyft's CTO was used to steal driver information from Uber?

https://www.reuters.com/article/us-...gation-involving-top-executives-idUSKCN0ZE0FP
 
tooloud10 said:
You mean like that one time that an IP address used by Lyft's CTO was claimed to be used to steal driver information from Uber?

https://www.reuters.com/article/us-...gation-involving-top-executives-idUSKCN0ZE0FP
Click to expand...
I fixed that for you.;) Hey who knows, maybe these hackers used that same security hole to breach Uber.

You completely misunderstood what you read in my quote btw. I asked for an example of when Uber was unfairly targeted by the media, which was the claim in the quote I replied to earlier. I wasn't asking about someone targeting Uber's security.
 
as a developer myself all I can think of is whose idea was to version the credentials? it's GIT 101 to never version credentials on a git repo.
 
tooloud10 said:
How is that the same thing at all? No, I'm not going to post my info on a public forum, but I'm also not going to stomp my feet and whine about Uber because someone got my phone number and email address.



You must have been screaming from the rooftops about the Equifax breach, then.
[doublepost=1511366120][/doublepost]

You mean like that one time that an IP address used by Lyft's CTO was used to steal driver information from Uber?

https://www.reuters.com/article/us-...gation-involving-top-executives-idUSKCN0ZE0FP
Click to expand...

You seem to be sticking up for Uber.
Read this:
http://www.bbc.co.uk/news/technolog...0g7qt/uber&link_location=live-reporting-story
 
I don't understand these ransom things where the hackers agree to delete the data after they're paid. Is it more like "delete" (*wink*) the data?
 
If this were the first time Uber acted like scumbags. But it isn't. What a vile company.
 
Last edited:
I deleted the Uber app from my iPhone earlier in the year. They are a slime ball company and don't deserve to stay in business.

Mark
 
Boy this is absolute ****ing ********, of course the data was on-sold.

My uber account was used for nefarious purposes twice earlier this year because of that data breach.
 
kdarling said:
This is a new CEO who just found out about what happened, and is trying to set things right.

The people who should be in trouble are the previous security and legal advisers.



Not defending Uber, cuz I don't care about them. Just trying to slow the usual mob mentality :)

Few stop to read what happened, they just want blood. Much easier than actually thinking.

For example, apparently Uber knew the identity of the two hackers who got the info. So perhaps there was never any plan to sell the customer info in the first place, but were paid simply to keep quiet that a breach had happened.

We don't have all the background.
Click to expand...

Ah well they are now facing heavy fines, because those ex bosses didn’t bother to inform ANY of the authorities of the hack regardless of trying to pay them off to protect their pathetic image, which is highly illegal. They could face international fines depending on how far the breach reached, I think they are a scum of a company and would never trust or use them.
 
apolloa said:
Ah well they are now facing heavy fines, because those ex bosses didn’t bother to inform ANY of the authorities of the hack regardless of trying to pay them off to protect their pathetic image, which is highly illegal. They could face international fines depending on how far the breach reached, I think they are a scum of a company and would never trust or use them.
Click to expand...

Yep, not a glowing image of a company, for sure.

However, they're useful around the northeast to get between towns and train stations, and around the city.

My older daughter uses them a lot when she comes to visit.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Back
Top