The Uber data breach began with a hacker purchasing stolen credentials belonging to an Uber employee from a dark web marketplace.
An initial attempt to connect to Uber's network with these credentials failed because the account was protected with MFA.Mar 2, 2023.
Uber's security challenges
The company has contended with several high-profile incidents across the past several years.
In 2016, a third-party breach exposed data belonging to 57 million customers and drivers.
In 2022, a social engineering attempt resulted in access to the company's internal networks and channels..
We identified any employee accounts that were compromised or potentially compromised and either blocked their access to Uber systems or required a password reset.
We disabled many affected or potentially affected internal tools.
We rotated keys (effectively resetting access) to many of our internal services..
The Uber data breach began with a hacker purchasing stolen credentials belonging to an Uber employee from a dark web marketplace.
An initial attempt to connect to Uber's network with these credentials failed because the account was protected with MFA.Mar 2, 2023.
With Uber, data encryption is built directly into the app so your information can't be taken from your account..
On September 15th, Uber suffered a breach.
A hacker managed to gain unrestricted access to Uber's network.
Uber released two statements saying that they are “responding to an incident” and that No sensitive user data had been obtained.Sep 4, 2023.
The alleged hacker gained control over Uber’s internal systems after compromising the Slack account of an employee, according to the New York Times.
Initial reports indicate the hacker used social engineering tactics, where criminals prey on people’s credulity and inexperience to gain entry to corporate systems.
Uber added that in response to the breach, it is strengthening its multifactor authentication policies and has reset employee access to internal tools.
Uber has linked the cybersecurity incident it disclosed last week to hackers affiliated with the Lapsus$ gang, a group accused of numerous high-profile corporate data breaches.
The hacker claimed to be 18 years old, according to the report.
Uber confirmed that there are no issues with the company’s service, which operates in more than 10,000 cities around the world.
We are currently responding to a cybersecurity incident.
We are in touch with law enforcement and will post additional updates here as they become available.
The company in 2018 agreed to pay $148 million in a settlement related to the incident with attorneys general from 50 states and DC.
Uber said Thursday that it was investigating a “cybersecurity incident” after a hacker shared evidence that they had breached the ride-hailing giant’s computer systems with journalists and security researchers.
