#uber hack

New Post has been published on https://takenews.net/uber-says-no-evidence-hackers-took-rider-credit-card-numbers/

#Uber Says No Evidence #Hackers Took #Rider #Credit Card Numbers

An outdoor cyber-security agency employed by Uber after a large information theft discovered no proof that rider bank card, checking account or Social Safety numbers had been downloaded by two hackers, the corporate stated in a response to calls for for data from US senators.

However the ride-hailing firm disclosed that in some instances, the hackers acquired location data from the place the place individuals signed up for Uber, in addition to closely encoded variations of consumer passwords.

On November 21, Uber disclosed that names, electronic mail addresses and mobile-phone numbers of 57 million drivers and riders had been stolen. In a letter to 4 Republican senators led by Commerce Committee Chairman John Thune of South Dakota, the corporate says that Mandiant, the safety agency, discovered 32 million of these are outdoors the US and 25 million are inside. Of the overall, 7.7 million are drivers, largely within the US, and hackers acquired driver’s license numbers for 600,000 of them, in line with the letter from new Uber CEO Dara Khosrowshahi.

The ride-hailing firm additionally stated it has not seen proof of fraud or misuse of knowledge taken within the breach, which lasted greater than a 12 months earlier than being disclosed. Two workers had been fired for not disclosing the theft to “acceptable events,” the letter stated.

The hackers emailed Uber’s US safety group anonymously on November 14, 2016 telling them in regards to the breach and demanding a fee. Uber tracked down the breach in non-public cloud information saved on Amazon’s internet providers and shut down entry, which got here by a “compromised credential,” the letter stated.

The safety group agreed to pay $100,000 (roughly Rs. 64.2 lakhs) to the hackers for an settlement to delete the information, and later tracked down the hackers’ actual names. Each signed paperwork assuring that the stolen information was destroyed, Khosrowshahi wrote. Workforce members discovered that the hackers first gained entry on October 13, 2016, and there was no additional entry after Nov. 15, 2016, the letter stated.

Uber notified the US Lawyer’s workplaces in San Francisco and Manhattan, in addition to different authorities businesses, on November 21 of this 12 months, however it’s not clear whether or not any legal investigation has been began. Neither workplace confirmed nor denied an investigation.