Uber CEO Dara Khosrowshahi revealed that hackers had gained access to the personal information of 57 million of the firm's users by breaking into the company database.
About 600,000 drivers in the US have had their identities and driver's licence numbers compromised by the attackers.
In an attempt to coerce Uber, the hackers sought $100,000 in return for not disclosing the stolen information.
The CEO clarified that because Uber built its company on the security and confidence of its clients, incidents of this nature won't occur again.
Source: https://securityaffairs.com/65868/data-breach/uber-data-breach.html
TPRM report: https://scoringcyber.rankiteo.com/company/uber-com
"id": "ube229181223",
"linkid": "uber-com",
"type": "Breach",
"date": "11/2017",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 57000000,
'industry': 'Transportation',
'location': 'Global',
'name': 'Uber',
'size': 'Large',
'type': 'Company'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': 57600000,
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personal Information',
"Driver's Licence Numbers"]},
'description': 'Hackers gained access to the personal information of 57 '
'million Uber users and 600,000 drivers by breaking into the '
'company database.',
'impact': {'brand_reputation_impact': 'Negative',
'data_compromised': ['Personal Information',
"Driver's Licence Numbers"],
'identity_theft_risk': 'High'},
'lessons_learned': 'Importance of security and client confidence',
'motivation': 'Financial Gain',
'ransomware': {'ransom_demanded': 100000},
'response': {'communication_strategy': 'Public Disclosure by CEO'},
'title': 'Uber Data Breach',
'type': 'Data Breach'}