lol
lol
Uber Paid Hackers to Delete Stolen Data on 57M People
11–20 of 606 posts
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#12At the time of the incident, Uber was negotiating with U.S. regulators investigating separate claims of privacy violations. Uber now says it had a legal obligation to report the hack to regulators and to drivers whose license numbers were taken. Instead, the company paid hackers $100,000 to delete the data and keep the breach quiet.
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#13Credit Monitoring is the shittiest way to resolve these issues.
I've stopped using any credit card numbers for anything ditial. I can change paypal passwords weekly If I'm that paranoid.
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#14Ever since Susan Fowler told her story about what happened to her at Uber, I have only used Lyft, and have encouraged all my friends to do the same. I plan to never use Uber again.
[deleted]
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#15Credit card numbers are a bug.
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#16> Here’s how the hack went down: Two attackers accessed a private GitHub coding site used by Uber software engineers and then used login credentials they obtained there to access data stored on an Amazon Web Services account that handled computing tasks for the company. From there, the hackers discovered an archive of rider and driver information. Later, they emailed Uber asking for money, according to the company.
Don't check secrets into VCS, folks!
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#17I wish I was a fly on the wall at Transport for London. Or to be at that meeting TfL will be having with Uber, when Uber are going to magically prove themselves to be a 'fit and proper' company. At some point after some British chat about the weather someone on the TfL side of the table might ask: 'So, that data breach...'
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#18"In January 2016, the New York attorney general fined Uber $20,000 for failing to promptly disclose an earlier data breach in 2014." Because you know...20k really really hurts for a company like Uber.
This would have been interesting if GDPR was applied.
https://www.gdpr.associates/data-breach-penalties/
"There will be two levels of fines based on the GDPR. The first is up to €10 million or 2% of the company’s global annual turnover of the previous financial year, whichever is higher. The second is up to €20 million or 4% of the company’s global annual turnover of the previous financial year, whichever is higher.
The Parliament had requested for fines to reach €100 million or 5% of the company’s global annual turnover. The agreed fines are the compromise that was reached."
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#19If the FTC doesn't act on this they are toothless. Uber's blatant disregard to anything accountable or respectable is astounding:
"In January 2016, the New York attorney general fined Uber $20,000 for failing to promptly disclose an earlier data breach in 2014. After last year’s cyberattack, the company was negotiating with the FTC on a privacy settlement even as it haggled with the hackers on containing the breach, Uber said. The company finally agreed to the FTC settlement three months ago, without admitting wrongdoing and before telling the agency about last year’s attack."
Re: Uber Paid Hackers to Delete Stolen Data on 57M People
#20I am amazed at the things Uber gets through and is still standing after...
Never underestimate the power of marketing. My mother for instance would use Uber over any ride-sharing system due to its insane exposure and the fact that these stories remain relatively unheard of in comparison.
My family and friends outside the tech industry have almost no clue about nearly all these scandals - especially the data breaches and the former CEO's indiscretions. About the only thing they hear is that some Uber drivers have assaulted passengers in the past, but they write that off against the fact that a lot of Taxi drivers have done the same in the past.
It is a telling example that the pain point of a bad taxi service in a city is usually enough for them to conformance rationalise that Uber is still a better alternative, despite any of these issues.