Careem has identified an incident involving unauthorised access to customer data
1–10 of 28 posts
Re: Careem has identified an incident involving unauthorised access to customer data
#2Nothing to see here, its a minor breach.
Re: Careem has identified an incident involving unauthorised access to customer data
#3Well now.
What customer account data was stolen?
Customers’ name, email address, phone number and trip data.
Re: Careem has identified an incident involving unauthorised access to customer data
#4Nothing to see here, its a minor breach.
Trip data can contain extremely sensitive information.
Re: Careem has identified an incident involving unauthorised access to customer data
#5It is ingenuine on their part to not report how detailed the trip data they have is. Trip data could easily show Users' home/office locations, their daily travel patterns, their kid's daycare and whatnot. This kind of knowledge can be extremely dangerous if it falls into the wrong hands. Careem should be more straightforward about this and explain the consequences, rather than slyly gloss over the most dangerous part of the breach by mentioning only two effing words about it.
Re: Careem has identified an incident involving unauthorised access to customer data
#6Wonderful, hacking often means dumping one data store due to sec problem with it (think 90s-SQL-injection).
I assume trip data was stored in the same system as emails - so both got hacked. Minor security considerations would put those in different systems and not store together.
Re: Careem has identified an incident involving unauthorised access to customer data
#7Why is Uber included in the title here? It makes it seem like Uber was involved. I think the title should mention, at most, the Careem is a Middle Eastern ridesharing company.
Re: Careem has identified an incident involving unauthorised access to customer data
#8I know it's difficult to find an appropriate title but wouldn't -
"Careem, ridesharing company/app in the Middle East"
work better than calling out Uber?
Re: Careem has identified an incident involving unauthorised access to customer data
#9Re: Careem has identified an incident involving unauthorised access to customer data
#10The compromise was identified on January 14th, and the announcement took three months? That's a pretty appalling timeline.