Uber reveals cover-up of hack affecting 57M riders, drivers

<p>Uber is coming clean about its cover-up of a year-old hacking attack that stole personal information about more than 57 million of the beleaguered ride-hailing service's customers and drivers.</p>

News 12 Staff

Nov 22, 2017, 11:35 AM

Updated 2,344 days ago

Share:

By MICHAEL LIEDTKE
AP Technology Writer
SAN FRANCISCO (AP) - Uber is coming clean about its cover-up of a year-old hacking attack that stole personal information about more than 57 million of the beleaguered ride-hailing service's customers and drivers.
So far, there's no evidence that the data taken has been misused, according to a Tuesday blog post by Uber's recently hired CEO, Dara Khosrowshahi. Part of the reason nothing malicious has happened is because Uber acknowledges paying the hackers $100,000 to destroy the stolen information.
The revelation marks the latest stain on Uber's reputation.
The San Francisco company ousted Travis Kalanick as CEO in June after an internal investigation concluded he had built a culture that allowed female workers to be sexually harassed and encouraged employees to push legal limits.
It's also the latest major breach involving a prominent company that didn't notify the people that could be potentially harmed for months or even years after the break-in occurred.
Yahoo didn't make its first disclosure about hacks that hit 3 billion user accounts during 2013 and 2014 until September 2016. Credit reporting service Equifax waited several months before revealing this past September that hackers had carted off the Social Security numbers of 145 million Americans.
Khosrowshahi criticized Uber's handling of its data theft in his blog post.
"While I can't erase the past, I can commit on behalf of every Uber employee that we will learn from our mistakes," Khosrowshahi wrote. "We are changing the way we do business, putting integrity at the core of every decision we make and working hard to earn the trust of our customers."
That pledge shouldn't excuse Uber's previous regime for its egregious behavior, said Sam Curry, chief security officer for the computer security firm Cybereason.
"The truly scary thing here is that Uber paid a bribe, essentially a ransom to make this breach go away, and they acted as if they were above the law," Curry said. "Those people responsible for the integrity and confidentiality of the data in-fact covered it up."
The heist took the names, email addresses and mobile phone numbers of 57 million riders around the world. The thieves also nabbed the driver's license numbers of 600,000 Uber drivers in the U.S.
Uber waited until Tuesday to begin notifying the drivers with compromised driver's licenses, which can be particularly useful for perpetrating identify theft. For that reason, Uber will now pay for free credit-report monitoring and identity theft protection services for the affected drivers.
Kalanick, who still sits on Uber's board of directors, declined to comment on the data breach that took place in October 2016. Uber says the response to the hack was handled by its chief security officer, Joe Sullivan, a former federal prosecutor whom Kalanick lured away from Facebook in 2015.
As part of his effort to set things right, Khosrowshahi extracted Sullivan's resignation from Uber and also jettisoned Craig Clark, a lawyer who reported to Sullivan.
Clark didn't immediately respond to a request for comment sent through his LinkedIn profile. Efforts to reach Sullivan were unsuccessful.
Uber's silence about its breach came while it was negotiating with the Federal Trade Commission about its handling of its riders' information.
Earlier in 2016, the company reached a settlement with the New York attorney general requiring it to take steps to be more vigilant about protecting the information that its app stores about its riders. As part of that settlement, Uber also paid a $20,000 fine for waiting to notify five months about another data breach that it discovered in September 2014.
Copyright 2017 The Associated Press. All rights reserved. This material may not be published, broadcast, rewritten or redistributed.


More from News 12
2:07
Two NYPD officers arrested and facing multiple charges of sexual assault

Two NYPD officers arrested and facing multiple charges of sexual assault

1:57
Security heightened at Bronx Home Depot following customer complaints of uncomfortable encounters

Security heightened at Bronx Home Depot following customer complaints of uncomfortable encounters

2:15
Scattered showers across Wednesday; colder weather arrives Thursday

Scattered showers across Wednesday; colder weather arrives Thursday

DA: 3 teens indicted for killing bystander, wounding 4 in subway shooting

DA: 3 teens indicted for killing bystander, wounding 4 in subway shooting

1:53
Bronx bookworms take part in writing workshop for World Book Day

Bronx bookworms take part in writing workshop for World Book Day

1:57
State taxi federation raises reward for information to help stop carjackings, robberies

State taxi federation raises reward for information to help stop carjackings, robberies

1:42
Irish consulate general joins BP Gibson for a Woodlawn walkthrough

Irish consulate general joins BP Gibson for a Woodlawn walkthrough

1:00
Fordham Road BID discusses local improvements made, offers a look toward the future

Fordham Road BID discusses local improvements made, offers a look toward the future

1:56
MTA meets with riders in Fordham to hear their concerns with current transit system

MTA meets with riders in Fordham to hear their concerns with current transit system

0:59
City now has power to padlock illegal cannabis stores

City now has power to padlock illegal cannabis stores

1:30
NYPD: Shooting suspect linked to death of 24-year-old in Melrose still on the loose

NYPD: Shooting suspect linked to death of 24-year-old in Melrose still on the loose

0:30
Bronx hip-hop star MC Sha-Rock, Bronx Historical Society offering $1,000 scholarship

Bronx hip-hop star MC Sha-Rock, Bronx Historical Society offering $1,000 scholarship

1:44
'I can sleep better.' Longwood resident thanks News 12 for report on Bruckner Expressway construction noise

'I can sleep better.' Longwood resident thanks News 12 for report on Bruckner Expressway construction noise

1:20
Police: $1,000 stolen from Bronx gas station at gunpoint; suspects at large

Police: $1,000 stolen from Bronx gas station at gunpoint; suspects at large

State police: Victim of I-684 car crash identified as convicted murderer in country illegally

State police: Victim of I-684 car crash identified as convicted murderer in country illegally

2:50
Residents in Morris Heights living in ‘uninhabitable’ conditions demand fair housing

Residents in Morris Heights living in ‘uninhabitable’ conditions demand fair housing

1:34
'We really want to find him.' Wakefield family searches for missing loved one

'We really want to find him.' Wakefield family searches for missing loved one

0:45
New York Botanical Garden celebrates Earth Day

New York Botanical Garden celebrates Earth Day

1:27
Scholar Athlete: Tiarra Jackson

Scholar Athlete: Tiarra Jackson

1:49
Spring break in the Bronx: Low-cost events and activities around the borough

Spring break in the Bronx: Low-cost events and activities around the borough