A threat actor named ‘UberLeaks’ recently leaked data that was stolen from Uber and app's drivers on a hacking forum known for publishing data breaches. The leaked data included name and Social Security number and/or Tax Identification number. The leaked data is related to a security breach on a third-party vendor.

The Maine Office of the Attorney General reported that Genova Burns LLC experienced a data breach involving Uber Technologies, Inc. The breach occurred between January 23, 2023, and January 31, 2023, and impacted the personal data of 10 individuals, including Social Security numbers. The breach was reported on March 31, 2023, and identity theft protection services through Kroll were offered to those affected.

A threat actor named ‘UberLeaks’ recently leaked data that was stolen from Uber and Uber Eats on a hacking forum known for publishing data breaches. The leaked data included numerous archives claiming to be source code associated with mobile device management platforms (MDM) used by Uber and Uber Eats and third-party vendor services. The leaked data is related to a security breach on a third-party vendor.

Uber was targeted by a cyber attack, and hackers gained access to security vulnerability information. The alleged hacker compromised an employee's Slack account before taking over Uber's internal systems. The hacker used social engineering instead of complex hacking methods. In order to access company accounts and sensitive data, thieves take advantage of people's credulity and lack of experience in this situation. They are still investigating the incident.

A cybercriminal has admitted to hacking businesses like Uber, Sainsbury's, and Groupon to sell customers' personal information on the dark web. The other targets included Nectar, T-Mobile, Asda, Ladbrokes, Coral, and Argos. The data comprised all the information required to complete an online purchase and was then promoted and sold to clients through his dark website. The firm is thought to have lost more than £200,000 due to the theft, although no financial data was collected. West pleaded guilty to two counts of conspiring to defraud, one count of hacking a computer, four counts of possessing and supplying marijuana, two counts of having criminal property, and one crime of money laundering Bitcoins. The leaked data is related to a security breach on a third-party vendor.

Uber CEO Dara Khosrowshahi revealed that hackers had gained access to the personal information of 57 million of the firm's users by breaking into the company database. About 600,000 drivers in the US have had their identities and driver's licence numbers compromised by the attackers. In an attempt to coerce Uber, the hackers sought $100,000 in return for not disclosing the stolen information. The CEO clarified that because Uber built its company on the security and confidence of its clients, incidents of this nature won't occur again.

Cloudflare was disclosing a lot of private data, including login passwords and authentication cookies. Uber, Fitbit, 1Password, and OKCupid are just a few of the big names affected by the Cloudbleed security flaw in Cloudflare servers. Because mobile apps are created with the same backends as browsers for HTTPS (SSL/TLS) termination and content delivery, they are likewise impacted by Cloudbleed. The fact that Cloudflare directed Ormandy to the company's bug bounty programme and offered the expert a t-shirt as payment in lieu of cash is highly unusual.

The Washington State Office of the Attorney General reported a data breach involving Uber Technologies, Inc. on November 21, 2017. The breach occurred between October 13, 2016, and November 15, 2016, affecting the names and driver's license numbers of approximately 10,888 drivers in Washington State. Uber took remedial actions including providing credit monitoring services for the affected individuals.

In 2016, Uber suffered a major data breach in which hackers accessed a third-party cloud service and stole personal data of 57 million users (drivers and riders), including names, email addresses, and phone numbers, as well as driver’s license numbers for 600,000 drivers. Instead of disclosing the incident to regulators (the US Federal Trade Commission) and affected individuals, Uber’s then-Chief Security Officer, Joseph Sullivan, orchestrated a cover-up. The company paid the hackers $100,000 in ransom (disguised as a bug bounty) to delete the data and keep the breach secret. The concealment lasted over a year, violating breach notification laws and leading to Sullivan’s 2023 conviction for obstruction of justice and mispriison of a felony (failure to report a crime). The breach exposed Uber to regulatory fines, reputational damage, and legal liabilities, while eroding trust among users and drivers. The case underscored the risks of non-compliance with data protection laws and the severe consequences of executive-level misconduct in cybersecurity incidents.

The Washington Attorney General's Office reported a data breach involving Uber Technologies, Inc. on June 16, 2016. The breach, which occurred on May 13, 2014, involved unauthorized access to a database affecting 1,355 Washington residents, compromising their names and driver's license numbers.