A threat actor named ‘UberLeaks’ recently leaked data that was stolen from Uber and app's drivers on a hacking forum known for publishing data breaches.
The leaked data included name and Social Security number and/or Tax Identification number.
The leaked data is related to a security breach on a third-party vendor.
Source: https://www.theregister.com/2023/04/03/uber_drivers_info_stolen/
TPRM report: https://scoringcyber.rankiteo.com/company/uber-com
"id": "ube23210723",
"linkid": "uber-com",
"type": "Breach",
"date": "04/2023",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization’s existence"{'affected_entities': [{'industry': 'Transportation',
'name': 'Uber',
'type': 'Company'}],
'attack_vector': 'Third-party vendor breach',
'data_breach': {'data_exfiltration': True,
'personally_identifiable_information': True,
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information']},
'description': 'A threat actor named ‘UberLeaks’ recently leaked data that '
"was stolen from Uber and app's drivers on a hacking forum "
'known for publishing data breaches. The leaked data included '
'name and Social Security number and/or Tax Identification '
'number. The leaked data is related to a security breach on a '
'third-party vendor.',
'impact': {'data_compromised': ['Name',
'Social Security number',
'Tax Identification number']},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Data Theft',
'threat_actor': 'UberLeaks',
'title': 'Uber Data Breach by UberLeaks',
'type': 'Data Breach'}