Uber has revealed massive data breaches from over a year ago. The company pays hackers a sum of $ 100,000 to silence about the hack. According to Uber, 57 million customers were affected by the violations.
Another day, there are other big data breaches. This time, Uber is the target, but unlike other hacks, it takes more than a year to reveal the hack to his customers.
According to a blog post from Uber, hackers managed to steal personal data from 57 million Uber users who are suspicious in data breach. Among those compromised, according to a Bloomberg report, there are 7 million drivers, of which about 600,000 have their driver license numbers stolen. Uber said that the information does not include things like Social Security numbers or credit cards.
Uber did not let the hack wrap up because he did not know it. The Bloomberg report notes that former CEO and founder Uber Travis Kalanick was informed of the breach in November 2016, just a month after the hack took place.
So what did Uber do in the year between hack and today? Well, the Bloomberg report notes that instead of reporting a violation to the investigator, which legally must be done, he contacted the hacker and paid him $ 100,000 to wipe the data and stay silent about everything. At the time of the hack, Uber had already negotiated with the investigator for a separate privacy breach claim - and still failed to report the hack.
All this should not happen, and I will not make excuses for it. While I can not erase the past, I can commit on behalf of every Uber employee that we will learn from our mistakes, "said Dara Khosrowshahi, the company's new chief executive officer, who took over in September, in a blog post. the way we do business. "
Despite hiding the hack for a year, it seems Uber is telling the truth by saying that it "changed the way of doing business." Bloomberg reported that the company overthrew Joe Sullivan, his chief security officer, and one of Sullivan's deputies for their role in covering up data breaches, which was at least the first step in changing his ways. The Uber blog mentions that "the two individuals who lead the response to this incident are no longer working with the company."
This is not the first major data breach this year. Earlier in 2017, the Equifax credit reporting agency was violated, potentially endangering the information of 143 million U.S. residents. The hack itself takes place between May and July, but has been revealed in September.
source by : https://www.digitaltrends.com